Hello, I have 7.5.0 ELK stack. And see very strange situation. I have index with "message" field and for example this line in it:
[comgId:1773182151883136235;expired:false;delivered:true;secured:false;querySecured:true]
when I do query "message : 1773182151883136235" it finds nothing (from Discovery page in Kibana)
but if I add filter :
{
"query": {
"match": {
"message": {
"query": "1773182151883136235",
"type": "phrase"
}
}
}
}
elastic find that string. Why???
When inspect both queries I see that search parameters passed in "query" -> "bool" -> "filter": array.
But when I do query - it has :
"bool": {
"should": [
{
"match": {
"message": 1773182151883136300
}
}
],
"minimum_should_match": 1
}
and find nothing, but with filter request has:
{
"match_phrase": {
"message": {
"query": "1773182151883136235"
}
}
},
and search succeeded
For users more convenient write search queries in familiar search bar, instead create filter. Why this happened - is this bug or normal behavior ?
Thank you in advance.