Document compression - duplicate fields


If i copy fields and rename them to match ECS you have a duplicate of data, are these 2 fields deduplicated as part of the compression within the doc?

Looking at the wiki for


Hello Philip,

I don't know the answer to your question but you could use field aliases instead of duplicating the field:

This way, the field is stored only once but can still be accessed in both ways.

Best regards

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.