stack es msearch cli command
Auth required
Idempotent
Scope: global
elastic stack es msearch [options]
Run multiple searches.
Behaviour flags:
--dry-run — validate all inputs and exit without performing any action
--indexstring-
Comma-separated list of data streams, indices, and index aliases to search.
Repeatable: pass
--indexmultiple times to supply more than one value --[no-]allow-no-indices- A setting that does two separate checks on the index expression. If
false, the request returns an error (1) if any wildcard expression (including_alland*) resolves to zero matching indices or (2) if the complete set of resolved indices, aliases or data streams is empty after all expressions are evaluated. Iftrue, index expressions that resolve to no indices are allowed and the request returns an empty result. --[no-]ccs-minimize-roundtrips- If true, network roundtrips between the coordinating node and remote clusters are minimized for cross-cluster search requests.
--expand-wildcardsstring-
Type of index that wildcard expressions can match. If the request can target data streams, this argument determines whether wildcard expressions match hidden data streams.
Repeatable: pass
--expand-wildcardsmultiple times to supply more than one value --[no-]ignore-throttled- If true, concrete, expanded or aliased indices are ignored when frozen.
- If
false, the request returns an error if it targets a concrete (non-wildcarded) index, alias, or data stream that is missing, closed, or otherwise unavailable. Iftrue, unavailable concrete targets are silently ignored. --[no-]include-named-queries-score- Indicates whether hit.matched_queries should be rendered as a map that includes the name of the matched query associated with its score (true) or as an array containing the name of the matched queries (false) This functionality reruns each named query on every hit in a search response. Typically, this adds a small overhead to a request. However, using computationally expensive named queries on a large number of hits may add significant overhead.
--max-concurrent-searchesnumber- Maximum number of concurrent searches the multi search API can execute. Defaults to
max(1, (# of data nodes * min(search thread pool size, 10))). --max-concurrent-shard-requestsnumber- Maximum number of concurrent shard requests that each sub-search request executes per node.
--pre-filter-shard-sizenumber- Defines a threshold that enforces a pre-filter roundtrip to prefilter search shards based on query rewriting if the number of shards the search request expands to exceeds the threshold. This filter roundtrip can limit the number of shards significantly if for instance a shard can not match any documents based on its rewrite method i.e., if date filters are mandatory to match but the shard bounds and the query are disjoint.
--[no-]rest-total-hits-as-int- If true, hits.total are returned as an integer in the response. Defaults to false, which returns an object.
--routingstring-
Custom routing value used to route search operations to a specific shard.
Repeatable: pass
--routingmultiple times to supply more than one value --search-typestring- Indicates whether global term and document frequencies should be used when scoring returned documents.
--[no-]typed-keys- Specifies whether aggregation and suggester names should be prefixed by their respective types in the response.
--searchesstring[]--input-filestring- path to a JSON file to use as command input
--[no-]dry-run- validate all inputs and exit without performing any action (preview changes without applying them)
--[no-]json-
output as JSON