Lucene query on nested type

Elastic Stack Elasticsearch
#1

Hi guys!
We are trying to make a search based on lucene syntax on object with nested type fields.
We looked on DSL but it's not fitted to our requirements.
Our data looks like:
{ scans: [ { ip: "1.2.3.4", is_malware: true }, { ip: "1.2.3.5", is_malware: false } ] }

Any solutions or workarounds are welcome!

#2

If you are using nested mappings you need to used nested DSL queries. Query string searches (if this is what you are referring to) can as far as I know not handle nested mappings. If you need to avoid DSL you probably need to flatted your data model to avoid nested mappings.