Does different query code affect search performance?

Elastic Stack Elasticsearch
1

As title, if I have different query API, but the result is the same .
such as:

GET _search
{
"query": {
"bool": {
  "must": [
    {
        "term" : { "_index" : "logstash-2018.01.02" }   
    },
    {
        "term":{"IPV4_DST_ADDR":"192.168.0.159"}
    },
    {
      "range" : {
        "LAST_SWITCHED" : {
            "gte" : 1514166147
        }
        }
    }
  ]
}
}
}

if I delete the one line

   "term" : { "_index" : "logstash-2018.01.02" }

and the result is the same, does add this one line would raise the search performance?
beacuse I found the search shards is less when I filter the index.

thank you in advance!

2

Even better to search with

logstash-2018.01.02/_search

IMO

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.