Search Query Examples and Results
Tetra Data Platform (TDP) Versions
- For TDP versions >= 3.2, please continue with this page.
- For TDP versions < 3.2, please review this page.
This page describes Search query examples (and their results) that you can create using the Tetra Data Platform (TDP). For details about using Search in the Tetra Web API, click here.
You can enter text directly in the Search bar to search.
- If you search without specifying a field, then the value is case-insensitive.
- If you search for a specific field, then the value you enter must be the exact value.
Reserved Characters
The Search feature in the Tetra Data Platform recognizes these reserved characters:
Reserved Characters
Reserved characters are: + - = && || > < ! ( ) { } [ ] ^ " ~ * ? : \ /
To use any character which functions as an operator in the query itself, use a leading backslash to escape them.
For example, to search for (1+1)=2, you must enter the query as:
\(1\+1\)\=2
The escape characters are dropped when viewed on the web, and should also be escaped.
Search Text Examples and Explanation
This table provides Search text examples and explains what the search process is when searching through the files.
If you enter this Search text, | then search every file that... | Notes |
---|---|---|
word1 | contains "word1" in any field | case-insensitive |
word1 word2 | contains "word1" or "word2" in any field | case-insensitive White space is treated as OR implicitly. |
word1 OR word2 | contains "word1" or "word2" in any field | case-insensitive |
word1 AND word2 | contains "word1" and "word2" in any field | case-insensitive |
word1 AND NOT word2 | contains "word1" but not "word2" in any field | case-insensitive |
"word1 word2" | contains "word1 word2" in order in any field | case-insensitive. This behavior changes if you provide a specific field. |
data.sample.id: id1 | field "data.sample.id" is exactly "id1" | case-sensitive If a field is mapped as a "keyword" type, then you must perform an exact match. A "contains" search will not work. |
data.sample.id:"fake-id1" | field "data.sample.id" is exactly | case-sensitive |
source.type:"empower" AND data.sample.id:id1 | "source.type" is exactly "empower" and sample ID is exactly "id1" | case-sensitive |
_exists_:source.type | where the field "source.type" has any non-null value | |
!(_exists_:traceId) | field "traceId" does not exist | |
file.size:>1000 | field "file.size" is greater than 1000 | |
labels.name/value:something | Ability to search on Labels from the Search bar |
Plain Text Processing Examples
Plain text entered in the Search bar is analyzed using Elasticsearch's Standard Tokenizer. Word boundaries are determined based on the
Unicode Text Segmentation algorithm, as specified in Unicode Standard Annex #29.
This means that any searches that contain spaces, hyphens, '+', and some other common symbols, are broken down into terms; however, underscores are not. For this sentence example:
The 2 QUICK Brown-Foxes jumped_over the lazy dog's bone.
The sentence is broken down into these terms:
[ The, 2, QUICK, Brown, Foxes, jumped_over, the, lazy, dog's, bone ]
This may make exact-match searches unpredictable.
In this UUID example, you are trying to match an exact ID that includes hyphens:
576fd742-c1a6-4fb4-9ecb-398d53e4addb
This will match any data including:
"576fd742", "c1a6", "4fb4", "9ecb", "398d53e4addb"
We recommend that when you want to query for an exact match for such a value, you should add quotes around the search string:
"576fd742-c1a6-4fb4-9ecb-398d53e4addb"
This causes Elasticsearch to ignore any word boundaries and generate a more appropriate search result. However, this behavior exists for "free-text" searches only. Searches on exact fields are analyzed based on that particular field's type. For example, this query will use the Keyword tokenizer because this field is a keyword type:
source.type.executionId: 576fd742-c1a6-4fb4-9ecb-398d53e4addb
By default, the "Keyword" tokenizer does not adhere to the same word boundaries rules as the "Standard" tokenizer. An exact-match query without quotations works as expected.
Nested Type Examples
The Search bar does not reliably support queries on fields of the "Nested" type. However, you can use the Label & Advanced Filters menu to query those fields. See this link to search by schema data.
To determine if a field is nested, we recommend that you use the IDS Schema Viewer.
After you select a schema, select the "elasticsearch.json" artifact from the artifacts dropdown in the Details section. The JSON file shows which fields are mapped as a nested type.
To learn more about the nested type, click this link.
Wildcard Search Examples
You can use both * and ? as wildcards, and apply them to a field key or a value.
Wildcard Search | Search Result | Notes |
---|---|---|
qu?ck | "?" can be any character. contains the word that stars with "qu" plus one character plus "ck" in any field. | case-insensitive Matches "quick", "quack", and so on. |
science* | contains the word that starts with "science" in any field. | case-insensitive |
qu?ck OR science* | contains the word "qu?ck" or starts with "science" in any field. | case-insensitive |
data.\*:(quick OR brown) | Any field key that starts with data. that has exactly "quick" or "brown". | case-sensitive Matches data like "data.id: quick". |
Group Search Terms Examples
You use () parentheses to group words or operations.
Group Search Terms | Search Result |
---|---|
word1 AND (word2 OR word3) | case-insensitive contains "word1" and one of "word2", "word3" in any field. |
status:(active OR pending) title:(full text search) | case-sensitive "status" field that is either "active" or "pending", or "title" field that is any of "full", "text", "search". |
Specify a Range Examples
You can specify ranges for: date, numeric, or string fields. You specify inclusive ranges with square brackets [min TO max], and exclusive ranges with curly brackets {min TO max}.
Specified Range | Search Result |
---|---|
date:[2021-01-01 TO 2021-12-31] | All dates in 2021 |
count:[1 TO 5] | Numbers 1..5 |
tag:{alpha TO omega} | Tags between alpha and omega, excluding alpha and omega |
count:[10 TO *] | Numbers from 10 upwards |
date:{* TO 2012-01-01} | Dates before 2012 |
count:[1 TO 5} | Numbers from 1 up to but not including 5 |
Updated about 1 year ago