# \[ES5\] Fielddata is disabled on text fields by default

**URL:** <https://discuss.elastic.co/t/es5-fielddata-is-disabled-on-text-fields-by-default/72191>\
**Category:** Elasticsearch\
**Created:** [January 19, 2017, 4:45pm UTC](https://discuss.elastic.co/t/es5-fielddata-is-disabled-on-text-fields-by-default/72191 "2017-01-19T16:45:55Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Snowman](https://avatars.discourse-cdn.com/v4/letter/s/f17d59/32.png) [@Snowman](https://discuss.elastic.co/u/Snowman)\
**Post date:** [January 19, 2017, 4:45pm UTC](https://discuss.elastic.co/t/es5-fielddata-is-disabled-on-text-fields-by-default/72191/1 "2017-01-19T16:45:55Z")

</div>

Hi all,

i am total newbie (new user) of ElasticSearch, I wanted to test DNS tunneling detection with ES ( [https://github.com/elastic/examples/tree/master/packetbeat\_dns\_tunnel\_detection](https://github.com/elastic/examples/tree/master/packetbeat_dns_tunnel_detection) ) based on [https://www.elastic.co/blog/detecting\_dns\_tunnels\_with\_packetbeat\_and\_watcher](https://www.elastic.co/blog/detecting_dns_tunnels_with_packetbeat_and_watcher) , however i came to this error when i run $ curl -XPUT [http://localhost:9200/\_watcher/watch/\_execute?pretty](http://localhost:9200/_watcher/watch/_execute?pretty) -d@unique\_hostnames\_watch.json :

"reason" : "SearchPhaseExecutionException[all shards failed]; nested: RemoteTransportException[[YFTCeY1][127.0.0.1:9300][indices:data/read/search[phase/query]]]; nested: IllegalArgumentException[Fielddata is disabled on text fields by default. Set fielddata=true on [dns.question.etld\_plus\_one] in order to load fielddata in memory by uninverting the inverted index. Note that this can however use significant memory.]; ",

I am unable to change fielddata=true on dns.question.etld\_plus\_one, simply because I don't know how.

Thanks for any suggestions.

Martin

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [February 16, 2017, 4:46pm UTC](https://discuss.elastic.co/t/es5-fielddata-is-disabled-on-text-fields-by-default/72191/2 "2017-02-16T16:46:00Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.