The lucene query type uses LUCENE query string syntax to find matching documents or events within Elasticsearch.

#### Examples

- `status` field contains `active`

      status:active

- `title` field contains `quick` or `brown`

      title:(quick brown)

- `author` field contains the exact phrase `"john smith"`

      author:"John Smith"

Wildcard searches can be run on individual terms, using `?` to replace a single character, and `*` to replace zero or more characters:

    qu?ck bro*

- Numbers 1..5

      count:[1 TO 5]

- Tags between `alpha` and `omega`, excluding `alpha` and `omega`:

      tag:{alpha TO omega}

- Numbers from 10 upwards

      count:[10 TO *]