How I can make tow fields as default query search analyzed filed in ES 1.7.1

Elastic Stack Elasticsearch
1

Hi Experts,

Please guide me how I can enable only 2 fields to be a part of default query search , for now I am using following in my mapping , but I want other 2 fields except message .
"index.query.default_field" : "message"

I want something like "index.query.default_field" : ["src","alertmsg"], but it seems this setting does not support array values . Please help me on this .

2

You cannot do this.

3

ok, so what could be the solution to this as i disable _all , but i don't know how it is still searching ?

4

Use a multi_match query. If you are doing uri search then you need the df uri parameter.