ductile.query — threatgrid/ductile 0.4.1

bool clj

(bool opts)

Inputs: [opts :- BoolQueryParams] Returns: BoolQuery

Boolean Query

filter-map->terms-query clj

(filter-map->terms-query filter-map)

(filter-map->terms-query filter-map query)

transforms a filter map to en ES terms query

filtered clj

(filtered opts)

Filtered query

ids clj

(ids ids)

Inputs: [ids :- [s/Str]] Returns: IdsQuery

Ids Query

nested clj

(nested opts)

Nested document query

nested-terms clj

(nested-terms filters)

make nested terms from a filter: [[[:observable :type] ip] [[:observable :value] 42.42.42.1]] -> [{:terms {observable.type [ip]}} {:terms {observable.value [42.42.42.1]}}]

we force all values to lowercase, since our indexing does the same for all terms.

prepare-terms clj

(prepare-terms filter-map)

term clj

(term key values)

(term key values opts)

Term Query

terms clj

(terms key values)

(terms key values opts)

Terms Query