multi field mapping elasticsearch

Question

I'm trying to map a multi field in elasticsearch

1st field - 'in' should contain all the indexed column,
2nd field - 'orig' should contain the text as-is.

For example:

    "findings": {
       "type": "multi_field",
       "fields": {
          "in": {
             "type": "string"
          },
          "orig": {
             "type": "string",
             "index":"not_analyzed"
          }
       }

Once I create this and query this is how it looks.

When index = 'no' does it mean the field will never be indexed at all?

  "findings": {
                  "type": "string",
                  "index": "no",
                  "fields": {
                     "in": {
                        "type": "string"
                     },
                     "orig": {
                        "type": "string",
                        "index": "not_analyzed"
                     }
                  }

Rahul · Accepted Answer · 2016-02-06 04:10:35Z

2

Multi_fields have been removed from elasticsearch for long.

Instead, any of the core field types (excluding object and nested) now accept a fields parameter, as also shown in OP's second example.

However, When you specify fields inside any other field, it simply means copying the content to a different field and apply a different set of analyzers for querying on the same content.

So when you specify index=no , the field is not indexed as such and hence is not searchable but the inner fields have properties of their own.

You may also use copy_to to copy the content to other fields and specify the different analyzers there but then there is no 'explicit' relationship between the two fields which is pretty explicit in multi_fields as new fields are accessed as 'findings.in' or 'findings.orig'

answered Feb 6, 2016 at 4:10

Rahul

16.4k4 gold badges44 silver badges64 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

user1050619 Over a year ago

thanks..What are you referring as OP's second example?

Rahul Over a year ago

you have used "type": "multi_field" in first mapping whereas "type":"string" in your second mapping. Second mapping was being referred as 2nd example

Richa · Accepted Answer · 2016-02-06 03:25:27Z

0

"index" : "no" has got different meaning for different types. Since findings field in your question is String it has following meaning according to elasticsearch documentation.

no means that it won’t be searchable at all (as an individual field; it may still be included in _all). Setting to no disables include_in_all.

you can not directly search for the field findings as it has got index: no while you can search it using findings.in or findings.orig

You can study more about index property here

edited Feb 6, 2016 at 3:25

answered Feb 6, 2016 at 2:54

Richa

7,6796 gold badges30 silver badges36 bronze badges

Collectives™ on Stack Overflow

multi field mapping elasticsearch

2 Answers 2

2 Comments

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

2 Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related