Code snippets that go along with an ecmarchitect.com blog post on Elasticsearch search templates.

create-indexed-template.txt

POST /_search/template/tweets
{
   "template": {
      "query": {
         "filtered": {
            "filter": {
               "bool": {
                  "must": [
                     {
                        "term": {
                           "message": "{{ search_term }}"
                        }
                     }
                  ]
               }
            }
         }
      }
   }
}

invoke-file-template.txt

POST /twitter/tweet/_search/template
{
   "file": "tweets",
   "params": {
      "search_term": "elasticsearch"
   }
}

invoke-indexed-template.txt

POST /twitter/tweet/_search/template
{
   "id": "tweets",
   "params": {
      "search_term": "elasticsearch"
   }    
}

invoke-search-with-date-range.txt

POST /twitter/tweet/_search/template
{
   "file": "tweets",
   "params": {
      "search_term": "elasticsearch",
      "since": "now-30d"
   }
}

InvokeSearchTemplate.java

Map<String, Object> params = new HashMap<String, Object>();
params.put("search_term", "elasticsearch");
params.put("since", "now-30d");
    	
Template template = new Template("tweets", ScriptService.ScriptType.FILE, MustacheScriptEngineService.NAME, null, params);
SearchRequestBuilder request = client.prepareSearch(INDEX).setTemplate(template);
SearchResponse response = request.execute().actionGet();

params-with-user-list.json

{
    "search_term": "elasticsearch",
	"since": "now-30d",
	"userList": {
		"users": [
		    {
			    "name": "elastic"
		    },
		    {
			    "name": "jeffpotts01",
			    "isLast": true
		    }
		]
	}
}

resulting-query.json

{
	"query": {
		"filtered": {
			"filter": {
				"bool": {
					"must": [{
						"and": [{
							"term": {
								"message": "elasticsearch"
							}
						}, {
							"range": {
								"@timestamp": {
									"gte": "now-30d"
								}
							}
						}, {
							"or": [{
								"term": {
									"user": "elastic"
								}
							}, {
								"term": {
									"user": "jeffpotts01"
								}
							}]
						}]
					}]
				}
			}
		}
	}
}

search-template-with-array-handling.mustache

{
  "query": {
    "filtered": {
      "filter": {
        "bool": {
          "must": [
          {
            "and": [
            {
              "term": {
                "message": "{{ search_term }}"
              }
            }
            {{#since}}
            ,
            {
              "range": {
                "@timestamp": {
                  "gte": "{{ since }}"
                }
              }
            }
            {{/since}}
            {{#userList}}
            ,
            {
              "or": [
              {{#users}}
              {
                "term": {
                  "user": "{{ name }}"
                }
              }
              {{^isLast}},{{/isLast}}
              {{/users}}
              ]
            }
            {{/userList}}
            ]
          }
          ]
        }
      }
    }
  }
}

search-template-with-negate.mustache

{
  "query": {
    "filtered": {
      "filter": {
        "bool": {
          "must": [
          {
            "and": [
            {
              "term": {
                "message": "{{ search_term }}"
              }
            }
            {{#since}}
            ,
            {
              "range": {
                "@timestamp": {
                  "gte": "{{ since }}"
                }
              }
            }
            {{/since}}
            {{^since}}
            ,
            {
              "range": {
                "@timestamp": {
                  "gte": "now-1d"
                }
              }
            }
            {{/since}}
            ]
          }
          ]
        }
      }
    }
  }
}

simple-search-template.txt

POST /twitter/tweet/_search/template
{
   "inline": {
      "query": {
         "filtered": {
            "filter": {
               "bool": {
                  "must": [
                     {
                        "term": {
                           "message": "{{ search_term }}"
                        }
                     }
                  ]
               }
            }
         }
      }
   },
   "params": {
      "search_term": "elasticsearch"
   }
}

tweets-with-optional-date.mustache

{
  "query": {
    "filtered": {
      "filter": {
        "bool": {
          "must": [
          {
            "and": [
            {
              "term": {
                "message": "{{ search_term }}"
              }
            }
            {{#since}}
            ,
            {
              "range": {
                "@timestamp": {
                  "gte": "{{ since }}"
                }
              }
            }
            {{/since}}
            ]
          }
          ]
        }
      }
    }
  }
}