Source code for

Available Filters

The following filters are available on any ESQuery instance - you can chain
any of these on your query.

Note also that the ``term`` filter accepts either a list or a single element.
Simple filters which match against a field are based on this filter, so those
will also accept lists.
That means you can do ``form_query.xmlns(XMLNS1)`` or
``form_query.xmlns([XMLNS1, XMLNS2, ...])``.

Additions to this file should be added to the ``builtin_filters`` method on
either ESQuery or HQESQuery, as appropriate (is it an HQ thing?).

def match_all():
    return {"match_all": {}}

[docs]def term(field, value): """ Filter docs by a field 'value' can be a singleton or a list. """ if isinstance(value, list): return {"terms": {field: value}} elif isinstance(value, tuple): return {"terms": {field: list(value)}} elif isinstance(value, set): return {"terms": {field: list(value)}} else: return {"term": {field: value}}
[docs]def OR(*filters): """Filter docs to match any of the filters passed in""" return {"bool": {"should": filters}}
[docs]def AND(*filters): """Filter docs to match all of the filters passed in""" return {"bool": {"filter": filters}}
[docs]def NOT(filter_): """Exclude docs matching the filter passed in""" return {"bool": {"must_not": filter_}}
def not_term(field, value): return NOT(term(field, value))
[docs]def range_filter(field, gt=None, gte=None, lt=None, lte=None): """ Filter ``field`` by a range. Pass in some sensible combination of ``gt`` (greater than), ``gte`` (greater than or equal to), ``lt``, and ``lte``. """ return {"range": {field: { k: v for k, v in {'gt': gt, 'gte': gte, 'lt': lt, 'lte': lte}.items() if v is not None }}}
[docs]def date_range(field, gt=None, gte=None, lt=None, lte=None): """Range filter that accepts datetime objects as arguments""" def format_date(date): return date if isinstance(date, str) else date.isoformat() params = [d if d is None else format_date(d) for d in [gt, gte, lt, lte]] return range_filter(field, *params)
[docs]def domain(domain_name): """Filter by domain.""" return term('domain.exact', domain_name)
[docs]def doc_type(doc_type): """Filter by doc_type. Also accepts a list""" return term('doc_type', doc_type)
[docs]def doc_id(doc_id): """Filter by doc_id. Also accepts a list of doc ids""" return term("_id", doc_id)
[docs]def missing(field): """Only return docs missing a value for ``field``""" return NOT(exists(field))
[docs]def exists(field): """Only return docs which have a value for ``field``""" return {"exists": {"field": field}}
[docs]def empty(field): """Only return docs with a missing or null value for ``field``""" return OR(missing(field), term(field, ''))
[docs]def non_null(field): """Only return docs with a real, non-null value for ``field``""" return NOT(empty(field))
[docs]def nested(path, filter_): """Query nested documents which normally can't be queried directly""" return { "nested": { "path": path, "query": { "bool": { "filter": filter_ } } } }
def regexp(field, regex): return {"regexp": {field: regex}}