奇怪的输出查询弹性搜索

Question

I just started with using Elastic Search. I've got everything set-up correctly. I'm using Firebase + Flashlight + Elastic Search.

In my front-end I'm building queries based on different search params. I insert them into a node in Firebase /search/requests/ . Flashlight will pick this up and putting the response into /search/response , this works like a charm!

However, I'm not sure how to write my queries properly. I'm getting strange results when I'm trying to combine two must match queries. I'm using Query DSL.

My documents in Elastic Search under deliverables/doc are having the following scheme.

...
{
  "createdBy" : "admin@xx.org",
  "createdOn" : 1501200000000,
  "deadLine" : 1508716800000,
  "description" : {
    "value" : "dummy description"
  },
  "key" : "<FBKEY>",

  "programmes" : [ {
    "code" : "95000",
    "name" : "Test programme",
    "programYear" : 2017
  } ],
  "projects" : [ {
    "projectCode" : "113200",
    "projectName" : "Test project",
    "projectYear" : 2017
  } ],
  "reportingYear" : 2017,
  "status" : "Open",
  "type" : "writing",
  "updatedBy" : "admin@xx.org",
  "updatedOn" : 1501200000000,
},
...

My query has the following structure.

{
   "query": {
    "bool": {
      "must": [
        {
          "match": {
            "createdBy": "xx@company.org"
          },
          "match": {
            "programmes.code": "95000"
          }
        }
      ]
    }
  }
}

In my output I'm also getting documents that don't have exactly those two fields? They have a very low score as well. Is this normal?

My mapping, automatically created using Flashlight

Update 1

I just tried this query, however it still gives me strange results by not filtering on both fields:

   {
   "query": {
      "bool": {
         "filter": {
            "bool": {
               "must": [
                  {
                     "match": {
                        "programmes.code": "890000"
                     }
                  },
                  {
                     "match": {
                        "createdBy": "admin@xx.org"
                     }
                  }
               ]
            }
         }
      }
   }
}

Answer 1

The must clause used in bool query is executed in query context (all the documents are returned in decreasing order of score) and contributes to score. see link

If you want it to be executed as a filter, then use the following query:

{
  "query": {
    "bool": {
      "filter": {
        "bool": {
          "must": [
            {
              "match": {
                "createdBy": "xx@company.org"
              }
            },
            {
              "match": {
                "programmes.code": "95000"
              }
            }
          ]
        }
      }
    }
  }
}

NOTE:

By default the string field is analyzed, update the mapping of the string fields as not_analyzed , to use filter query. Refer: mapping-intro