# Dynamic mapping **URL:** \ **Category:** Elasticsearch\ **Created:** [October 12, 2022, 10:56pm UTC](https://discuss.elastic.co/t/dynamic-mapping/316475 "2022-10-12T22:56:25Z")\ **Posts on this page:** 10\ **Page:** 1
**Author:** ![cool999](https://avatars.discourse-cdn.com/v4/letter/c/d26b3c/32.png) [@cool999](https://discuss.elastic.co/u/cool999)\ **Post date:** [October 12, 2022, 10:56pm UTC](https://discuss.elastic.co/t/dynamic-mapping/316475/1 "2022-10-12T22:56:25Z")
Hi Team, I am trying to understand if we can partially customize elasticsearch's dynamic mapping i.e for some of the fields we will set the data type explicitely and all the remaining fields (which are not mentioned explicitely) will be taken care by elasitcsearch through its dynamic mappaing. The advantage in this is, we dont have to set datayype for each and every field and elaticsearch will set data type for new fields. 1. Is it possible? 2. If not, is there other way to achieve this, wherein we will save time on not setting data type for each and every filed and use the advantage of dynamic mapping. I am currently using dynamic mapping and planning to change 'text' to 'match\_only\_text' (as scoring is not important for server, aplication logs) so want to know how can i achieve this best way without impacting much. Thanks, ---
**Author:** ![RabBit\_BR](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rabbit_br/32/82261_2.png) [@RabBit\_BR](https://discuss.elastic.co/u/RabBit_BR)\ **Post date:** [October 13, 2022, 12:23am UTC](https://discuss.elastic.co/t/dynamic-mapping/316475/2 "2022-10-13T00:23:28Z")
Hi @cool999 Maybe you can try with [Dynamic templates](https://www.elastic.co/guide/en/elasticsearch/reference/current/dynamic-templates.html#match-unmatch). ---
**Author:** ![cool999](https://avatars.discourse-cdn.com/v4/letter/c/d26b3c/32.png) [@cool999](https://discuss.elastic.co/u/cool999)\ **Post date:** [October 13, 2022, 10:56pm UTC](https://discuss.elastic.co/t/dynamic-mapping/316475/3 "2022-10-13T22:56:32Z")
Hi @RabBit_BR, Thanks for your reply. I will try this, meantime can you confirm, if we miss to add a field (which is a part of document) in dynamic template will elasticsearch index it or ignore it? Also how it will handle any new field (which will come on future) in case its not part of document when its indexing. Thanks, ---
**Author:** ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\ **Post date:** [October 14, 2022, 1:15am UTC](https://discuss.elastic.co/t/dynamic-mapping/316475/4 "2022-10-14T01:15:13Z")
> [@cool999](#): > > I am trying to understand if we can partially customize elasticsearch's dynamic mapping i.e for some of the fields we will set the data type explicitely and all the remaining fields (which are not mentioned explicitely) will be taken care by elasitcsearch through its dynamic mappaing. This is the default behaviour of Elasticsearch, if you do not explicitly set a mapping in your index or using a template, it will be dynamically mapped. The issue with dynamic mapping is that sometimes it will not the fields in the way you expect and it makes you wast a lot of disk space as every string field will be index twice, both as `keyword` and `text`. With the Dynamic templates you have a little more control on how the fields that aren't explicitly mapped will be mapped, for example you can tell elasticsearch that every new string field that is not explicitly mapped, will be mapped as just a `keyword` field and not as `keyword` and `text`. ---
**Author:** ![cool999](https://avatars.discourse-cdn.com/v4/letter/c/d26b3c/32.png) [@cool999](https://discuss.elastic.co/u/cool999)\ **Post date:** [October 16, 2022, 9:50pm UTC](https://discuss.elastic.co/t/dynamic-mapping/316475/5 "2022-10-16T21:50:36Z")
Hi All, While going through dynamic template documentation i.e from [Dynamic templates | Elasticsearch Guide [7.16] | Elastic](https://www.elastic.co/guide/en/elasticsearch/reference/7.16/dynamic-templates.html), I have below doubts. Can someone please help to clear them. 1. It says, `If a dynamic template doesn’t define match_mapping_type, match, or path_match, it won’t match any field.` Q. Can someone say, what will happen with that field? Q. Will it not indexed or stored. 1. What will happen if same field matches at two places. i.e If we first map all integer fields to some data type but in the same template if we add integer field explicitly to some other data type, which one will take preference? 2. `Disabled_norms` > **[Dynamic templates | Elasticsearch Guide \[7.16\] | Elastic](https://www.elastic.co/guide/en/elasticsearch/reference/7.16/dynamic-templates.html#_disabled_norms)** Q. It it talking about scoring which we can see in below screenshot? ![Screenshot 2022-10-17 at 2.55.26 AM](https://us1.discourse-cdn.com/elastic/original/3X/7/1/71bef0f5f5f19bd291093680efaba3ef454c308e.jpeg) 1. `Time series` > **[Dynamic templates | Elasticsearch Guide \[7.16\] | Elastic](https://www.elastic.co/guide/en/elasticsearch/reference/7.16/dynamic-templates.html#_time_series)** When doing time series analysis with Elasticsearch, it is common to have many numeric fields that you will often aggregate on but never filter on. I didn't understand this part, `... but never filter on.` Q. Can someone please explain why does it mean? what capability will loose if you follow this. Q. If it's not going to index, then we can run aggregation on it? Q. Will be able to see this field and its value in discover section when looking at logs? Thanks, ---
**Author:** ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\ **Post date:** [October 16, 2022, 10:27pm UTC](https://discuss.elastic.co/t/dynamic-mapping/316475/6 "2022-10-16T22:27:26Z")
> [@cool999](#): > > Can someone say, what will happen with that field? If the field does not match any definition of the dynamic template, elasticsearch will try to guess how to map it, it will be indexed and stored. > [@cool999](#): > > What will happen if same field matches at two places. i.e If we first map all integer fields to some data type but in the same template if we add integer field explicitly to some other data type, which one will take preference? Doesn't see why anyone would do that other than by mistake, but If I'm not wrong the explicit mapping will take precedence over any dynamic template, needs to test to see what will happen. > [@cool999](#): > > Disabled\_norms Not sure what is your question here, but if you do not need scores when searching your documents you can [disable norms](https://www.elastic.co/guide/en/elasticsearch/reference/current/norms.html) to save space, if you need scores or not depends on your use case. > [@cool999](#): > > Q. Can someone please explain why does it mean? what capability will loose if you follow this. > > Q. If it's not going to index, then we can run aggregation on it? > > Q. Will be able to see this field and its value in discover section when looking at logs? If you set `index` to `false` on a field you won't be able to filter on the value of the field, but will be able to run aggregations on them and they will also show up on Kibana. For example, you may have a field named `bytesSent` with the amount of bytes sent by something that you do not want to filter by some specific value but still want to be able to run some aggregations like get the sum of the field for a specific case. ---
**Author:** ![cool999](https://avatars.discourse-cdn.com/v4/letter/c/d26b3c/32.png) [@cool999](https://discuss.elastic.co/u/cool999)\ **Post date:** [October 16, 2022, 10:54pm UTC](https://discuss.elastic.co/t/dynamic-mapping/316475/7 "2022-10-16T22:54:48Z")
Hi @leandrojmp, Thanks for your prompt response. For norms, just trying to understand whether it is referring to the same \_score field which we can see in attached screenshot. I think it is fine to disable it as i dont see use case where we want to see score value when searching. Saving as much as possible disk space is the aim. For time series, I think i am still not clear by what exactly mean by filter on. I got the point, even if we didnt index numeric fileds we still be able to see them in kibana as other fields and run aggregation (min, max) on them but not the filter one. Thanks, ---
**Author:** ![cool999](https://avatars.discourse-cdn.com/v4/letter/c/d26b3c/32.png) [@cool999](https://discuss.elastic.co/u/cool999)\ **Post date:** [October 17, 2022, 1:53pm UTC](https://discuss.elastic.co/t/dynamic-mapping/316475/8 "2022-10-17T13:53:00Z")
Hi @leandrojmp, If possible, can you give an example. ---
**Author:** ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\ **Post date:** [October 17, 2022, 2:48pm UTC](https://discuss.elastic.co/t/dynamic-mapping/316475/9 "2022-10-17T14:48:04Z")
> [@cool999](#): > > For norms, just trying to understand whether it is referring to the same \_score field which we can see in attached screenshot. Yes, this is the only score you have in elasticsearch, if you disable `norms` you won't haver any score for your searchs. > [@cool999](#): > > I think i am still not clear by what exactly mean by filter on. I'm not sure what is really the question, if you set `index: false` you won't be able to filter on the values of those fields, it means that you won't be able to make a query and use this field as a filter for the query to get more specific results. If you have for example a field named `bytesSent` with the value of `100`, you won't be able to filter on this field to find all the documents that have the value of `100`, but you will be able to run an aggregation on this field and get the sum of this field in multiple documents. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [November 14, 2022, 2:48pm UTC](https://discuss.elastic.co/t/dynamic-mapping/316475/10 "2022-11-14T14:48:21Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.