Search query syntax


Query syntax element

Description

AND

Boolean operator between filters.

NOT

Boolean operator between filters.

OR

Boolean operator between filters.

"we want to look up all these keywords"

Use double quotes to group multiple search entries into one single search string.
The search query looks for matches for the string as one token.

keywo*

Searches for words containing criteria.
Use the * character for multiple character wildcards.

key?ord

Searches for words containing criteria.
Use the ? character for single character wildcards.

keyword~

Searches for similar words. Fuzzy search.

"keyword1"^2 AND keyword2

Use the ^${integer} suffix to give more weight to a search term over another in a search query.

+keyword

Prefix + to include a keyword in a search (must be in the search).

-keyword

Prefix - to exclude a keyword from a search (must not be in the search).

/keyw?rd)/

Searches using Elasticsearch DSL query syntax regular expressions.

About wildcards

  • Currently supported wildcards: * and ?

  • Escape character: \

  • Avoid starting a wildcard query term with * or ? , as it may result in an extremely slow-running query.
    Search and rules use literal values and regex patterns to look for matching values assigned to the corresponding JSON path fields.

About complex searches

Besides full text search, you can use Boolean operators and wildcards.
You can combine these filtering options to create more refined searches.

Use Boolean operators to combine multiple quick filters, and to create a more complex search query.

Example:
enrichment_extracts.kind:domain AND enrichment_extracts.meta.classification:high