index.asciidoc 1.3 KB

1234567891011121314151617181920212223242526272829303132333435363738394041
  1. [[search-your-data]]
  2. = Search your data
  3. [partintro]
  4. --
  5. [[search-query]]
  6. A _search query_, or _query_, is a request for information about data in
  7. {es} data streams or indices.
  8. You can think of a query as a question, written in a way {es} understands.
  9. Depending on your data, you can use a query to get answers to questions like:
  10. * What pages on my website contain a specific word or phrase?
  11. * What processes on my server take longer than 500 milliseconds to respond?
  12. * What users on my network ran `regsvr32.exe` within the last week?
  13. * How many of my products have a price greater than $20?
  14. A _search_ consists of one or more queries that are combined and sent to {es}.
  15. Documents that match a search's queries are returned in the _hits_, or
  16. _search results_, of the response.
  17. A search may also contain additional information used to better process its
  18. queries. For example, a search may be limited to a specific index or only return
  19. a specific number of results.
  20. [discrete]
  21. [[search-toc]]
  22. === In this section
  23. * <<run-a-search>>
  24. * <<near-real-time>>
  25. * <<modules-cross-cluster-search>>
  26. * <<async-search-intro>>
  27. --
  28. include::run-a-search.asciidoc[]
  29. include::{es-repo-dir}/search/near-real-time.asciidoc[]
  30. include::{es-repo-dir}/async-search.asciidoc[]
  31. include::{es-repo-dir}/modules/cross-cluster-search.asciidoc[]