# Elastic Lucene vs KQL vs DSL vs EQL **URL:** \ **Category:** Elasticsearch\ **Tags:** elastic-stack-security\ **Created:** [April 18, 2022, 4:26am UTC](https://discuss.elastic.co/t/elastic-lucene-vs-kql-vs-dsl-vs-eql/302588 "2022-04-18T04:26:48Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![Esha](https://avatars.discourse-cdn.com/v4/letter/e/9de053/32.png) [@Esha](https://discuss.elastic.co/u/Esha)\ **Post date:** [April 18, 2022, 4:26am UTC](https://discuss.elastic.co/t/elastic-lucene-vs-kql-vs-dsl-vs-eql/302588/1 "2022-04-18T04:26:48Z")
Hi Team, Can you please share when should we use the lucene query, KQL, DSL and EQL query types. For rules creation is it best to use the lucene query or KQL query? Thank you ---
**Author:** ![Mark\_Harwood](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mark_harwood/32/10538_2.png) [@Mark\_Harwood](https://discuss.elastic.co/u/Mark_Harwood)\ **Post date:** [April 18, 2022, 6:23am UTC](https://discuss.elastic.co/t/elastic-lucene-vs-kql-vs-dsl-vs-eql/302588/2 "2022-04-18T06:23:11Z")
Hi. KQL and Lucene query are end-user facing syntaxes designed for fast data entry by mostly unsophisticated users. They expose a subset of the engine’s matching features and if users don’t add appropriate brackets [can produce logic they didn’t expect.](https://discuss.elastic.co/t/explanation-of-terms-in-a-search/297523/6) DSL is a more formal JSON based syntax which can control the full range of features but is only authored by technical users. So the answer to your question is largely dependent on who is authoring the rules. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [May 16, 2022, 6:23am UTC](https://discuss.elastic.co/t/elastic-lucene-vs-kql-vs-dsl-vs-eql/302588/3 "2022-05-16T06:23:14Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.