ElasticSearch Case Studies & Practical Application 3

Question 1

A financial services firm ingests trade data and needs near-real-time aggregations with minimal indexing latency. Which refresh strategy best meets this need?

Accepted Answer

Keep default 1s refresh interval

Answer

The default 1-second refresh interval provides near-real-time visibility into indexed documents without requiring manual refresh calls.

Question 2

A cybersecurity platform ingests firewall logs and needs to detect the same IP appearing in more than 100 events within 5 minutes. Which Elasticsearch feature handles this?

Accepted Answer

Watcher with a bucket aggregation alert condition

Answer

Watcher can run scheduled searches with bucket aggregation conditions, triggering alerts when a bucket (e.g., an IP) exceeds a defined threshold.

Question 3

A travel app indexes hotel listings. Users searching 'NYC hotels' get poor results because the index uses the default analyzer on the city field. What is the best fix?

Accepted Answer

Apply a synonym token filter mapping 'NYC' to 'New York City'

Answer

A synonym token filter at index or query time expands 'NYC' to 'New York City', improving recall for abbreviated city names.

Question 4

A streaming media company wants to recommend content based on a user's watch history stored in Elasticsearch. Which query finds documents similar to a given document?

Accepted Answer

More Like This (MLT) query

Answer

The More Like This query finds documents that share significant terms with a reference document, making it suitable for content-based recommendations.

Question 5

An online marketplace indexes product listings from multiple sellers. A seller's products should always appear first in their own storefront search. What technique achieves this?

Accepted Answer

Script score query adding a fixed boost when seller_id matches

Answer

A script score query can add a conditional boost to documents where seller_id matches, elevating the seller's own products without hiding others.

ElasticSearch Practice Test

ElasticSearch Practice Test

ElasticSearch Case Studies & Practical Application 3