Kibana Search Tips Cheat Sheet

*Double quotes are required for phrase searching, single quotes do not work
**Not analyzed fields are case sensitive
***All­owing a wildcard at the beginning of a word (eg "­*in­g") is partic­ularly heavy, because all terms in the index need to be examined, just in case they match
Reference: https:­//w­ww.e­la­sti­c.c­o/g­uid­e/e­n/e­las­tic­sea­rch­/re­fer­enc­e/c­urr­ent­/qu­ery­-ds­l-q­uer­y-s­tri­ng-­que­ry.html

Above is how Elasti­csearch stores analyzed vs not analyzed strings for searching.
Not analyzed fields need to be searched as one phrase.
Analyzed fields can be searched using one or more of its sections.
See: https:­//w­ww.e­la­sti­c.c­o/g­uid­e/e­n/e­las­tic­sea­rch­/gu­ide­/cu­rre­nt/­map­pin­g-i­ntr­o.html