Elasticsearch conditional query for nested array

Question

Using the following document, I'm trying to perform an Elasticsearch keyword query, conditionally excluding field data from the scope of the search. Is this possible?

{
  "Name":"doc1",
  "UserData":[
      {
         "EnteredBy":"Eric",
         "Description":"Desc entered by Eric, abc"
      },
      {
         "EnteredBy":"Alex",
         "Description":"Desc entered by Alex, def"
      }
   ]
}

The Elasticsearch query I need will allow me to search across the whole document, except it should exclude from the search UserData items where EnteredBy does not match the specified user.

The following queries would return results:

User:Eric doc1
User:Eric abc
User:Alex doc1
User:Fred doc1

The following queries would not return results:

User:Eric def
User:Fred def

Everything I've tried thus far, ends up filtering content based on the presence of UserData nodes which apply to the specified user. I can't think of a way to specify that a field should be searched, only if the EnteredBy field matches.

I could restructure the document, if that would solve the problem.

Edit 1

The index..

PUT index1
{
  "settings": {
    "number_of_shards": 2,
    "number_of_replicas": 0
  },
  "mappings": {
    "properties" : {
      "UserData" : {
        "type":"nested"
      },
      "Name": {
        "type":"text"
      }
    }
  }
}

Edit 2

The query below is providing the results that I need, except for the child entity, I have to search in a specific field. If I change the second condition of the nested search into a query_string search, then it no longer uses the EnteredBy condition.

GET index1/_search
{
 "query": {
      "bool": { 
        "should": [
        {
          "nested": 
          {
               "path": "UserData",
               "query": {
                  "bool": {
                    "must": [{
                      "match": {
                        "UserData.EnteredBy": "Eric"
                      }},
                      {
                        "match": {
                        "UserData.Description": "def"
                      }
                    }]

                  }
                }
          }
        },
        { 
          "query_string": 
          { 
            "query": "doc1x" 
          }

        }
      ]
     }
  }
}

Eric Bowden · Accepted Answer · 2019-12-27 22:42:06Z

1

This query appears to be working. I think I answered my own question.

GET index1/_search
{
 "query": {
      "bool": { 
        "should": [
        {
          "nested": 
          {
               "path": "UserData",
               "query": {
                  "bool": {
                    "must": [{
                      "match": {
                        "UserData.EnteredBy": "Eric"
                      }},
                      {
                        "query_string": {
                        "query": "def"
                      }
                    }]

                  }
                }
          }
        },
        { 
          "query_string": 
          { 
            "query": "doc1" 
          }

        }
      ]
     }
  }
}

answered Dec 27, 2019 at 22:42

Eric Bowden

1421 silver badge12 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

Kevin Quinzel Over a year ago

If you found a solution for your issue, please consider accepting your own answer :)

Eric Bowden Over a year ago

Thanks @KevinQuinzel, will do.. after the SF waiting period of 2 days.

Collectives™ on Stack Overflow

Elasticsearch conditional query for nested array

1 Answer 1

2 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

2 Comments

Your Answer

Sign up or log in

Post as a guest

Related