Elastic not searching in http.response.body.content field

Elastic Stack Elasticsearch
1

Hello,

I have an index which contains the field "http.response.body.content".
I updated the ignore_above values since this field was ignored.

However, it would seem that elasticsearch does not search the content of this field.

Example of field content:

{"meta":{"alerts":[],"warnings":[],"precision":3,"page":{"current":1,"total_pages":1,"total_results":118,"size":1000},"engine":{"name":"swsolidaris","type":"default"},"request_id":"ev5ArBetSzOPLdJ5UsFmjQ"},"results":[{"last_crawled_at":{"raw":"2024-03-20T12:54:59+00:00"},"article_type":{"raw":"avantage"},"advantage_resume":{"raw":"Des ennuis de santé à l’étranger ? Une maladie ou un accident nécessitant une hospitalisation, des soins urgents en milieu hospitalier ou un rapatriement : pensez à notre service d’assistance à l’étranger. Notre Centrale d’Alarme Mutas est accessible 24h/24h pour vous guider en cas de pépin."}

I am searching for the string "maladie" but it seems it's not found.
(while occurences of the same string in other fields are being found and returned)

Could someone explain why this might be the case please ?

2

What exactly is your query?

3

Simply the word "maladie"....
Guess i'm doing it wrong....

4

Could you provide a full recreation script as described in About the Elasticsearch category. It will help to better understand what you are doing. Please, try to keep the example as simple as possible.

A full reproduction script is something anyone can copy and paste in Kibana dev console, click on the run button to reproduce your use case. It will help readers to understand, reproduce and if needed fix your problem. It will also most likely help to get a faster answer.

Have a look at the Elastic Stack and Solutions Help · Forums and Slack | Elastic page. It contains also lot of useful information on how to ask for help.

Also please provide the mapping.