Elasticsearch

Overview

Elasticsearch is a distributed search and analytics engine built on Apache Lucene. It provides full-text search, structured queries, analytics, and logging at scale. Elasticsearch is the core of the Elastic Stack (ELK) and is available as a managed service on Elastic Cloud, Amazon OpenSearch, and Azure Cognitive Search.

Driver

Crate: reqwest
Version: 0.13

Connection fields

Field	Description
Host	Hostname or IP address of the Elasticsearch node.
Port	HTTP port the REST API listens on.
User	Authentication username (for Elastic security).
Password	Authentication password. Stored in the macOS Keychain.
Options	Additional connection parameters as `key1=val1&key2=val2`.

All connections also support an optional SSH tunnel. Configure the bastion host, port, user, and private key file under the SSH section of the connection form. See SSH tunnels for details.

Schema browser

Once connected, Arris fetches the cluster metadata and organizes it into groups.

The schema tree displays the following object types, grouped by category:

Indices — Elasticsearch indices
Aliases — index aliases
Index Templates — index templates
Data Streams — time-series data streams

Double-click any index, alias, or data stream to open it in a new tab with browse mode.

Query modes

Arris talks to Elasticsearch in two modes, switched per editor tab.

SQL mode — write read-only SELECT queries that Arris sends to the _sql endpoint. SHOW, DESCRIBE, and the Elasticsearch SQL EXPLAIN keyword are also accepted. Writes and CTEs (WITH) are not supported.
REST mode — start a line with an HTTP verb and path, for example GET /my-index/_search, followed by an optional JSON body. This exposes the full Elasticsearch REST API, including writes.

Supported SQL commands

Command	Notes
`SELECT`	Read-only queries sent to the `_sql` endpoint.

Unsupported SQL commands

Command	Notes
`INSERT`	Write through REST mode using the Query DSL.
`UPDATE`	Write through REST mode using the Query DSL.
`DELETE`	Write through REST mode using the Query DSL.
`CREATE` / `DROP`	Manage indices through REST mode.