Learning Elasticsearch

By : Andhavarapu

4.3 (4)

Buy this Book

Learning Elasticsearch

4.3 (4)

By: Andhavarapu

Buy this Book

Overview of this book

Elasticsearch is a modern, fast, distributed, scalable, fault tolerant, and open source search and analytics engine. You can use Elasticsearch for small or large applications with billions of documents. It is built to scale horizontally and can handle both structured and unstructured data. Packed with easy-to- follow examples, this book will ensure you will have a firm understanding of the basics of Elasticsearch and know how to utilize its capabilities efficiently. You will install and set up Elasticsearch and Kibana, and handle documents using the Distributed Document Store. You will see how to query, search, and index your data, and perform aggregation-based analytics with ease. You will see how to use Kibana to explore and visualize your data. Further on, you will learn to handle document relationships, work with geospatial data, and much more, with this easy-to-follow guide. Finally, you will see how you can set up and scale your Elasticsearch clusters in production environments.

Preface

What this book covers

What you need for this book

Who this book is for

Conventions

Reader feedback

Customer support

Free Chapter

Introduction to Elasticsearch

Basic concepts of Elasticsearch

Interacting with Elasticsearch

How does search work?

Scalability and availability

Summary

Setting Up Elasticsearch and Kibana

Installing Elasticsearch

Installing Kibana

Query format used in this book (Kibana Console)

Using cURL or Postman

Health of the cluster

Summary

Modeling Your Data and Document Relations

Mapping

Difference between full-text search and exact match

Core data types

Complex data types

Geo data type

Specialized data type

Mapping the same field with different mappings

Handling relations between different document types

Routing

Summary

Indexing and Updating Your Data

Indexing your data

Updating your data

Using Kibana to discover

Using Elasticsearch in your application

Concurrency

Translog

Primary and Replica shards

Summary

Organizing Your Data and Bulk Data Ingestion

Bulk operations

Reindex API

Ingest Node

Organizing your data

Shrink API

Summary

All About Search

Different types of queries

Sample data

Querying Elasticsearch

Relevance

Searching for same value across multiple fields

Caching

Summary

More Than a Search Engine (Geofilters, Autocomplete, and More)

Sample data

Correcting typos and spelling mistakes

Making suggestions based on the user input

Highlighting

Handling document relations using parent-child

Handling document relations using nested

Scripting

Post Filter

Reverse search using the percolate query

Geo and Spatial Filtering

Multi search

Search templates

Querying Elasticsearch from Java application

Summary

How to Slice and Dice Your Data Using Aggregations

Aggregation basics

Types of aggregations

Using Kibana to visualize aggregations

Caching

Doc values

Field data

Summary

Production and Beyond

Configuring Elasticsearch

Multinode cluster

How nodes discover each other

X-Pack

Monitoring

Thread pools

Elasticsearch server logs

Summary

Exploring Elastic Stack (Elastic Cloud, Security, Graph, and Alerting)

Elastic Cloud

Security

Graph

Alerting

Summary

Customer Reviews

4.3 (4)

5 star

50%

4 star

25%

3 star

25%

2 star

1 star

Thread pools

Elasticsearch has a thread pool for all the major modules. Each thread pool has a queue associated with the pool. For example, if the index thread pool receives more requests than it can process, the requests are queued up. If the queue is full, the request is rejected. Watching for the number of requests in the queue is important. If the requests are frequently queued, the response times are degraded. The pool size is calculated based on the available processors. The important thread pools are as follows:

Thread pool	Description
index	This is used for index and delete operations. It has a queue size of 200.
search	This is used for search operations. It has a queue size of 1,000.
bulk	This is used for bulk operations. It has a queue size of 50.
refresh	This is used for refresh operations.