Document compression - duplicate fields

Elastic Stack Elasticsearch
1

Hi,

If i copy fields and rename them to match ECS you have a duplicate of data, are these 2 fields deduplicated as part of the compression within the doc?

Looking at the wiki for

Thanks
Phil

2

Hello Philip,

I don't know the answer to your question but you could use field aliases instead of duplicating the field: https://www.elastic.co/guide/en/elasticsearch/reference/master/alias.html

This way, the field is stored only once but can still be accessed in both ways.

Best regards
Wolfram

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.