anchor.diff:  
   * What processes on my server take longer than 500 milliseconds to respond?
   * What users on my network ran `regsvr32.exe` within the last week?
  -* How many of my products have a price greater than $20?
   * What pages on my website contain a specific word or phrase?
   
   A _search_ consists of one or more queries that are combined and sent to {es}.
  
positive.code:   }
  }
  ----
  // TEST[s/^/PUT my-index-000002\n/]
  
  You can also search multiple data streams and indices using a wildcard (`*`)
  pattern.
  
  The following request targets the wildcard pattern `user_logs*`. The request
  searches any data streams or indices in the cluster that start with `user_logs`.
  
  [source,console]
  ----
  GET /user_logs*/_search
  {
    "query": {
      "match": {
        "user.id": "kimchy"
      }
    }
  }
  ----
  
  To search all data streams and indices in a cluster, omit the target from the
  request path. Alternatively, you can use `_all` or `*`.
  
negative.code: <<query-dsl,Query DSL>>.
  
  The following request body search uses the <<query-dsl-match-query,`match`>>
  query to match documents with a `user.id` value of `kimchy`.
  
  [source,console]
  ----
  