elasticsearch

Scope

Covers Elasticsearch itself: index and mapping design, text analysis, the Query DSL, ES|QL, relevance and its measurement, aggregations, vector and semantic retrieval, data streams and the index lifecycle, reindexing, shard and heap capacity, cluster allocation, diagnostics, and cluster-level security.

The body is written against Elasticsearch 9.5 (9.5.3 at time of writing; 8.19 is the last 8.x series). Rules that need a particular version carry a gate such as (9.4+). Facts marked as measured were run against a single-node 9.5.3 instance on a basic licence.

Not covered: