Information retrieval finds relevant content for a user or application. Elasticsearch supports search across varied providers such as Slack, Confluence, and Google Drive, and can back web, mobile, or server-side applications. section 1.4.1
Retrieval begins when analyzed data is stored in Elasticsearch. A search query is analyzed similarly to the indexed field, tokenized and normalized, then matched against the inverted index to return results. section 3.1.3
Useful retrieval capabilities include:
- Match more than exact words by handling root words, synonyms, and spelling mistakes through advanced full-text queries. section 3.1.3
- Issue queries through REST APIs over HTTP, using Kibana as a visual editor or another REST-capable client. section 2.0
- Retrieve matching documents separately from analytical queries, which gather summarized statistics. section 3.1.3
Analyzer-consistent search
Suppose a field uses a French analyzer. Elasticsearch applies that same analyzer when searching the field, so query tokens are normalized consistently with the tokens stored in the inverted index. section 3.1.3
Use the figure to place search alongside observability and security as major Elasticsearch application areas. section 1.4.1










