Exploring your data

Let us now start looking into how the data gets stored in the Elasticsearch cluster, which takes us to the concept of a document. Anything that we ingest in the cluster gets stored in the cluster as a document.

Elasticsearch – a document store

Before starting to understand how exploration of data can be done, Elasticsearch is called a distributed document store as it stores the data in the form of serialized JSON documents:

Figure 3.1 – An index with a collection of documents can be stored in Elasticsearch

These JSON documents are distributed across all the nodes of the cluster. If we go into where this document is stored in an index, it would be a logical namespace called an Index. It can be thought of as a collection of JSON documents that has data stored in the form of key-value pairs that contain the data. See the following example:

Figure 3.2 – A sample of a record of data

...