How to search non indexed field in elasticsearch

Elastic Stack Elasticsearch
1

I have 10 fields inserted into elasticsearch out of which 5 fields are
indexed.
Is it possible to search on non indexed field?

Thanks in advance.

Regards
Rama Krishna P

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/c63ac6bb-8717-470e-a5e4-01a8bd75b769%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

1 Like
2

You cannot search/filter on a non-indexed field.

--
Ivan

On Wed, Nov 5, 2014 at 11:45 PM, ramakrishna panguluri <
panguluri.ramakrishna@gmail.com> wrote:

I have 10 fields inserted into elasticsearch out of which 5 fields are
indexed.
Is it possible to search on non indexed field?

Thanks in advance.

Regards
Rama Krishna P

--
You received this message because you are subscribed to the Google Groups
"elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/elasticsearch/c63ac6bb-8717-470e-a5e4-01a8bd75b769%40googlegroups.com
https://groups.google.com/d/msgid/elasticsearch/c63ac6bb-8717-470e-a5e4-01a8bd75b769%40googlegroups.com?utm_medium=email&utm_source=footer
.
For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/CALY%3DcQDD0JYJeX%2BCmV%3DGACekwofjUYFQvoSWQ86Th3r-MBWZtw%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

3

You can totally use a script filter checking the field against _source.
Its super duper duper slow but you can do it if you need it rarely.

On Thu, Nov 6, 2014 at 11:13 AM, Ivan Brusic ivan@brusic.com wrote:

You cannot search/filter on a non-indexed field.

--
Ivan

On Wed, Nov 5, 2014 at 11:45 PM, ramakrishna panguluri <
panguluri.ramakrishna@gmail.com> wrote:

I have 10 fields inserted into elasticsearch out of which 5 fields are
indexed.
Is it possible to search on non indexed field?

Thanks in advance.

Regards
Rama Krishna P

--
You received this message because you are subscribed to the Google Groups
"elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/elasticsearch/c63ac6bb-8717-470e-a5e4-01a8bd75b769%40googlegroups.com
https://groups.google.com/d/msgid/elasticsearch/c63ac6bb-8717-470e-a5e4-01a8bd75b769%40googlegroups.com?utm_medium=email&utm_source=footer
.
For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups
"elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/elasticsearch/CALY%3DcQDD0JYJeX%2BCmV%3DGACekwofjUYFQvoSWQ86Th3r-MBWZtw%40mail.gmail.com
https://groups.google.com/d/msgid/elasticsearch/CALY%3DcQDD0JYJeX%2BCmV%3DGACekwofjUYFQvoSWQ86Th3r-MBWZtw%40mail.gmail.com?utm_medium=email&utm_source=footer
.

For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/CAPmjWd2LDuCHOF-7gACn72N1O1ra4Erm%2BnfJ2bS-LQ-UFxQu3g%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

1 Like
4

Thanks Nikolas Everett for your quick reply.

Can you please provide me example to execute the same. I tried multiple
times but unable to execute.

Thanks in advance

On Thursday, November 6, 2014 9:44:55 PM UTC+5:30, Nikolas Everett wrote:

You can totally use a script filter checking the field against _source.
Its super duper duper slow but you can do it if you need it rarely.

On Thu, Nov 6, 2014 at 11:13 AM, Ivan Brusic <iv...@brusic.com
<javascript:>> wrote:

You cannot search/filter on a non-indexed field.

--
Ivan

On Wed, Nov 5, 2014 at 11:45 PM, ramakrishna panguluri <
panguluri....@gmail.com <javascript:>> wrote:

I have 10 fields inserted into elasticsearch out of which 5 fields are
indexed.
Is it possible to search on non indexed field?

Thanks in advance.

Regards
Rama Krishna P

--
You received this message because you are subscribed to the Google
Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send
an email to elasticsearc...@googlegroups.com <javascript:>.
To view this discussion on the web visit
https://groups.google.com/d/msgid/elasticsearch/c63ac6bb-8717-470e-a5e4-01a8bd75b769%40googlegroups.com
https://groups.google.com/d/msgid/elasticsearch/c63ac6bb-8717-470e-a5e4-01a8bd75b769%40googlegroups.com?utm_medium=email&utm_source=footer
.
For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups
"elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to elasticsearc...@googlegroups.com <javascript:>.
To view this discussion on the web visit
https://groups.google.com/d/msgid/elasticsearch/CALY%3DcQDD0JYJeX%2BCmV%3DGACekwofjUYFQvoSWQ86Th3r-MBWZtw%40mail.gmail.com
https://groups.google.com/d/msgid/elasticsearch/CALY%3DcQDD0JYJeX%2BCmV%3DGACekwofjUYFQvoSWQ86Th3r-MBWZtw%40mail.gmail.com?utm_medium=email&utm_source=footer
.

For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/4d3e5636-1124-4dcb-b6be-b62f893cae39%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

5

wildcard query is also working on non-indexed fields.

On Friday, November 7, 2014 8:11:30 AM UTC+1, ramky wrote:

Thanks Nikolas Everett for your quick reply.

Can you please provide me example to execute the same. I tried multiple
times but unable to execute.

Thanks in advance

On Thursday, November 6, 2014 9:44:55 PM UTC+5:30, Nikolas Everett wrote:

You can totally use a script filter checking the field against _source.
Its super duper duper slow but you can do it if you need it rarely.

On Thu, Nov 6, 2014 at 11:13 AM, Ivan Brusic iv...@brusic.com wrote:

You cannot search/filter on a non-indexed field.

--
Ivan

On Wed, Nov 5, 2014 at 11:45 PM, ramakrishna panguluri <
panguluri....@gmail.com> wrote:

I have 10 fields inserted into elasticsearch out of which 5 fields are
indexed.
Is it possible to search on non indexed field?

Thanks in advance.

Regards
Rama Krishna P

--
You received this message because you are subscribed to the Google
Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send
an email to elasticsearc...@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/elasticsearch/c63ac6bb-8717-470e-a5e4-01a8bd75b769%40googlegroups.com
https://groups.google.com/d/msgid/elasticsearch/c63ac6bb-8717-470e-a5e4-01a8bd75b769%40googlegroups.com?utm_medium=email&utm_source=footer
.
For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google
Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send
an email to elasticsearc...@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/elasticsearch/CALY%3DcQDD0JYJeX%2BCmV%3DGACekwofjUYFQvoSWQ86Th3r-MBWZtw%40mail.gmail.com
https://groups.google.com/d/msgid/elasticsearch/CALY%3DcQDD0JYJeX%2BCmV%3DGACekwofjUYFQvoSWQ86Th3r-MBWZtw%40mail.gmail.com?utm_medium=email&utm_source=footer
.

For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/7c772529-df50-4d34-82f9-5f444ef6c5b2%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

6

wildcard query is also working on non-indexed fields.

Are you sure?
I don’t think so.

--
David Pilato | Technical Advocate | Elasticsearch.com http://elasticsearch.com/
@dadoonet https://twitter.com/dadoonet | @elasticsearchfr https://twitter.com/elasticsearchfr | @scrutmydocs https://twitter.com/scrutmydocs

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/5E0F733A-C7D5-452F-951A-E104A92ACF1C%40pilato.fr.
For more options, visit https://groups.google.com/d/optout.

7

Taken from here

"Matches documents that have fields matching a wildcard expression (not
analyzed)"

I also use wildcard on non analyzed fields, and it is working.

2014-11-07 9:44 GMT+01:00 David Pilato david@pilato.fr:

wildcard query is also working on non-indexed fields.

Are you sure?
I don’t think so.

--
David Pilato | Technical Advocate | Elasticsearch.com
http://Elasticsearch.com
@dadoonet https://twitter.com/dadoonet | @elasticsearchfr
https://twitter.com/elasticsearchfr | @scrutmydocs
https://twitter.com/scrutmydocs

--
You received this message because you are subscribed to a topic in the
Google Groups "elasticsearch" group.
To unsubscribe from this topic, visit
https://groups.google.com/d/topic/elasticsearch/iGBwluGlWpc/unsubscribe.
To unsubscribe from this group and all its topics, send an email to
elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/elasticsearch/5E0F733A-C7D5-452F-951A-E104A92ACF1C%40pilato.fr
https://groups.google.com/d/msgid/elasticsearch/5E0F733A-C7D5-452F-951A-E104A92ACF1C%40pilato.fr?utm_medium=email&utm_source=footer
.

For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/CAGKxwgkYrJ8mstHk%2Bt8pdTUanZoVpTeLF9dh8-viV%2BYymx%3DdAA%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

8

Not analyzed does not mean not indexed.

It is indexed but Strings are not analyzed and indexed as is.

--
David :wink:
Twitter : @dadoonet / @elasticsearchfr / @scrutmydocs

Le 7 nov. 2014 à 10:11, Georgi Ivanov georgi.r.ivanov@gmail.com a écrit :

Taken from here
Elasticsearch Platform — Find real-time answers at scale | Elastic
"Matches documents that have fields matching a wildcard expression (not analyzed)"

I also use wildcard on non analyzed fields, and it is working.

2014-11-07 9:44 GMT+01:00 David Pilato david@pilato.fr:

wildcard query is also working on non-indexed fields.

Are you sure?
I don’t think so.

--
David Pilato | Technical Advocate | Elasticsearch.com
@dadoonet | @elasticsearchfr | @scrutmydocs

--
You received this message because you are subscribed to a topic in the Google Groups "elasticsearch" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/elasticsearch/iGBwluGlWpc/unsubscribe.
To unsubscribe from this group and all its topics, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/5E0F733A-C7D5-452F-951A-E104A92ACF1C%40pilato.fr.

For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/CAGKxwgkYrJ8mstHk%2Bt8pdTUanZoVpTeLF9dh8-viV%2BYymx%3DdAA%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/A7B93A96-CCF8-4AF7-A083-6566113BC192%40pilato.fr.
For more options, visit https://groups.google.com/d/optout.

9

The first example on

should just if you replace > with .equals

On Fri, Nov 7, 2014 at 2:11 AM, ramky panguluri.ramakrishna@gmail.com
wrote:

Thanks Nikolas Everett for your quick reply.

Can you please provide me example to execute the same. I tried multiple
times but unable to execute.

Thanks in advance

On Thursday, November 6, 2014 9:44:55 PM UTC+5:30, Nikolas Everett wrote:

You can totally use a script filter checking the field against _source.
Its super duper duper slow but you can do it if you need it rarely.

On Thu, Nov 6, 2014 at 11:13 AM, Ivan Brusic iv...@brusic.com wrote:

You cannot search/filter on a non-indexed field.

--
Ivan

On Wed, Nov 5, 2014 at 11:45 PM, ramakrishna panguluri <
panguluri....@gmail.com> wrote:

I have 10 fields inserted into elasticsearch out of which 5 fields are
indexed.
Is it possible to search on non indexed field?

Thanks in advance.

Regards
Rama Krishna P

--
You received this message because you are subscribed to the Google
Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send
an email to elasticsearc...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/
msgid/elasticsearch/c63ac6bb-8717-470e-a5e4-01a8bd75b769%
40googlegroups.com
https://groups.google.com/d/msgid/elasticsearch/c63ac6bb-8717-470e-a5e4-01a8bd75b769%40googlegroups.com?utm_medium=email&utm_source=footer
.
For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google
Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send
an email to elasticsearc...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/
msgid/elasticsearch/CALY%3DcQDD0JYJeX%2BCmV%3DGACekwofjUYFQvoSWQ86Th3r-
MBWZtw%40mail.gmail.com
https://groups.google.com/d/msgid/elasticsearch/CALY%3DcQDD0JYJeX%2BCmV%3DGACekwofjUYFQvoSWQ86Th3r-MBWZtw%40mail.gmail.com?utm_medium=email&utm_source=footer
.

For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups
"elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/elasticsearch/4d3e5636-1124-4dcb-b6be-b62f893cae39%40googlegroups.com
https://groups.google.com/d/msgid/elasticsearch/4d3e5636-1124-4dcb-b6be-b62f893cae39%40googlegroups.com?utm_medium=email&utm_source=footer
.

For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/CAPmjWd1CcCUuNPhM65dR1fngNHGCeMdc-18tdvhH-2ga%3D_3jGg%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

10

Thanks Nikolas.
I tried the query but it failed to search on non-indexed field.

Query i used is
{
"filter": {
"script": {
"script": "doc['service'].value == http"
}
}
}
"service" is non-indexed field.

Exception after execution is
{[x3a9BIGLRwOdhwpsaUZbrw][siem0511][0]:
QueryPhaseExecutionException[[siem0511][0]:
query[ConstantScore(cache(_type:siem))],from[0],size[10]: Query Failed
[Failed to execute main query]]; nested: CompileException[[Error: No field
found for [service] in mapping with types [siem]]\n[Near : {...
doc['service'].value == http ....}]\n ^\n[Line: 1, Column: 1]];
nested: ElasticsearchIllegalArgumentException[No field found for [service]
in mapping with types [siem]]; }

Please help.

Thanks in advance.

Regards
Ramky

On Friday, November 7, 2014 5:49:04 PM UTC+5:30, Nikolas Everett wrote:

The first example on
Elasticsearch Platform — Find real-time answers at scale | Elastic
should just if you replace > with .equals

On Fri, Nov 7, 2014 at 2:11 AM, ramky <panguluri....@gmail.com
<javascript:>> wrote:

Thanks Nikolas Everett for your quick reply.

Can you please provide me example to execute the same. I tried multiple
times but unable to execute.

Thanks in advance

On Thursday, November 6, 2014 9:44:55 PM UTC+5:30, Nikolas Everett wrote:

You can totally use a script filter checking the field against _source.
Its super duper duper slow but you can do it if you need it rarely.

On Thu, Nov 6, 2014 at 11:13 AM, Ivan Brusic iv...@brusic.com wrote:

You cannot search/filter on a non-indexed field.

--
Ivan

On Wed, Nov 5, 2014 at 11:45 PM, ramakrishna panguluri <
panguluri....@gmail.com> wrote:

I have 10 fields inserted into elasticsearch out of which 5 fields are
indexed.
Is it possible to search on non indexed field?

Thanks in advance.

Regards
Rama Krishna P

--
You received this message because you are subscribed to the Google
Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send
an email to elasticsearc...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/
msgid/elasticsearch/c63ac6bb-8717-470e-a5e4-01a8bd75b769%
40googlegroups.com
https://groups.google.com/d/msgid/elasticsearch/c63ac6bb-8717-470e-a5e4-01a8bd75b769%40googlegroups.com?utm_medium=email&utm_source=footer
.
For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google
Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send
an email to elasticsearc...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/
msgid/elasticsearch/CALY%3DcQDD0JYJeX%2BCmV%3DGACekwofjUYFQvoSWQ86Th3r-
MBWZtw%40mail.gmail.com
https://groups.google.com/d/msgid/elasticsearch/CALY%3DcQDD0JYJeX%2BCmV%3DGACekwofjUYFQvoSWQ86Th3r-MBWZtw%40mail.gmail.com?utm_medium=email&utm_source=footer
.

For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups
"elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to elasticsearc...@googlegroups.com <javascript:>.
To view this discussion on the web visit
https://groups.google.com/d/msgid/elasticsearch/4d3e5636-1124-4dcb-b6be-b62f893cae39%40googlegroups.com
https://groups.google.com/d/msgid/elasticsearch/4d3e5636-1124-4dcb-b6be-b62f893cae39%40googlegroups.com?utm_medium=email&utm_source=footer
.

For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/725d437c-988d-4462-98db-dc281c7e438c%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

11

Use _source['service'] instead. Much slower but doesn't need to the field
indexed.
On Nov 10, 2014 1:01 AM, "ramky" panguluri.ramakrishna@gmail.com wrote:

Thanks Nikolas.
I tried the query but it failed to search on non-indexed field.

Query i used is
{
"filter": {
"script": {
"script": "doc['service'].value == http"
}
}
}
"service" is non-indexed field.

Exception after execution is
{[x3a9BIGLRwOdhwpsaUZbrw][siem0511][0]:
QueryPhaseExecutionException[[siem0511][0]:
query[ConstantScore(cache(_type:siem))],from[0],size[10]: Query Failed
[Failed to execute main query]]; nested: CompileException[[Error: No field
found for [service] in mapping with types [siem]]\n[Near : {...
doc['service'].value == http ....}]\n ^\n[Line: 1, Column: 1]];
nested: ElasticsearchIllegalArgumentException[No field found for [service]
in mapping with types [siem]]; }

Please help.

Thanks in advance.

Regards
Ramky

On Friday, November 7, 2014 5:49:04 PM UTC+5:30, Nikolas Everett wrote:

The first example on Elasticsearch Platform — Find real-time answers at scale | Elastic
reference/current/query-dsl-script-filter.html#query-dsl-script-filter
should just if you replace > with .equals

On Fri, Nov 7, 2014 at 2:11 AM, ramky panguluri....@gmail.com wrote:

Thanks Nikolas Everett for your quick reply.

Can you please provide me example to execute the same. I tried multiple
times but unable to execute.

Thanks in advance

On Thursday, November 6, 2014 9:44:55 PM UTC+5:30, Nikolas Everett wrote:

You can totally use a script filter checking the field against
_source. Its super duper duper slow but you can do it if you need it
rarely.

On Thu, Nov 6, 2014 at 11:13 AM, Ivan Brusic iv...@brusic.com wrote:

You cannot search/filter on a non-indexed field.

--
Ivan

On Wed, Nov 5, 2014 at 11:45 PM, ramakrishna panguluri <
panguluri....@gmail.com> wrote:

I have 10 fields inserted into elasticsearch out of which 5 fields
are indexed.
Is it possible to search on non indexed field?

Thanks in advance.

Regards
Rama Krishna P

--
You received this message because you are subscribed to the Google
Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it,
send an email to elasticsearc...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/
msgid/elasticsearch/c63ac6bb-8717-470e-a5e4-01a8bd75b769%40goo
glegroups.com
https://groups.google.com/d/msgid/elasticsearch/c63ac6bb-8717-470e-a5e4-01a8bd75b769%40googlegroups.com?utm_medium=email&utm_source=footer
.
For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google
Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send
an email to elasticsearc...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/
msgid/elasticsearch/CALY%3DcQDD0JYJeX%2BCmV%3DGACekwofjUYFQvoS
WQ86Th3r-MBWZtw%40mail.gmail.com
https://groups.google.com/d/msgid/elasticsearch/CALY%3DcQDD0JYJeX%2BCmV%3DGACekwofjUYFQvoSWQ86Th3r-MBWZtw%40mail.gmail.com?utm_medium=email&utm_source=footer
.

For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google
Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send
an email to elasticsearc...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/
msgid/elasticsearch/4d3e5636-1124-4dcb-b6be-b62f893cae39%
40googlegroups.com
https://groups.google.com/d/msgid/elasticsearch/4d3e5636-1124-4dcb-b6be-b62f893cae39%40googlegroups.com?utm_medium=email&utm_source=footer
.

For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups
"elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/elasticsearch/725d437c-988d-4462-98db-dc281c7e438c%40googlegroups.com
https://groups.google.com/d/msgid/elasticsearch/725d437c-988d-4462-98db-dc281c7e438c%40googlegroups.com?utm_medium=email&utm_source=footer
.
For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/CAPmjWd1Yp%2BY%3Dm%2BRhrJMMCBFdJ_Vg57PH8fP9_WE3neWB6cjH%3DA%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

12

Thanks Nikolas. Filtering of non-index data is working now using _source.

Regards
Rama Krishna P

On Monday, November 10, 2014 7:08:02 PM UTC+5:30, Nikolas Everett wrote:

Use _source['service'] instead. Much slower but doesn't need to the field
indexed.
On Nov 10, 2014 1:01 AM, "ramky" <panguluri....@gmail.com <javascript:>>
wrote:

Thanks Nikolas.
I tried the query but it failed to search on non-indexed field.

Query i used is
{
"filter": {
"script": {
"script": "doc['service'].value == http"
}
}
}
"service" is non-indexed field.

Exception after execution is
{[x3a9BIGLRwOdhwpsaUZbrw][siem0511][0]:
QueryPhaseExecutionException[[siem0511][0]:
query[ConstantScore(cache(_type:siem))],from[0],size[10]: Query Failed
[Failed to execute main query]]; nested: CompileException[[Error: No field
found for [service] in mapping with types [siem]]\n[Near : {...
doc['service'].value == http ....}]\n ^\n[Line: 1, Column: 1]];
nested: ElasticsearchIllegalArgumentException[No field found for [service]
in mapping with types [siem]]; }

Please help.

Thanks in advance.

Regards
Ramky

On Friday, November 7, 2014 5:49:04 PM UTC+5:30, Nikolas Everett wrote:

The first example on http://www.elasticsearch.org/
guide/en/elasticsearch/reference/current/query-dsl-
script-filter.html#query-dsl-script-filter should just if you replace >
with .equals

On Fri, Nov 7, 2014 at 2:11 AM, ramky panguluri....@gmail.com wrote:

Thanks Nikolas Everett for your quick reply.

Can you please provide me example to execute the same. I tried multiple
times but unable to execute.

Thanks in advance

On Thursday, November 6, 2014 9:44:55 PM UTC+5:30, Nikolas Everett
wrote:

You can totally use a script filter checking the field against
_source. Its super duper duper slow but you can do it if you need it
rarely.

On Thu, Nov 6, 2014 at 11:13 AM, Ivan Brusic iv...@brusic.com wrote:

You cannot search/filter on a non-indexed field.

--
Ivan

On Wed, Nov 5, 2014 at 11:45 PM, ramakrishna panguluri <
panguluri....@gmail.com> wrote:

I have 10 fields inserted into elasticsearch out of which 5 fields
are indexed.
Is it possible to search on non indexed field?

Thanks in advance.

Regards
Rama Krishna P

--
You received this message because you are subscribed to the Google
Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it,
send an email to elasticsearc...@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/elasticsearch/c63ac6bb-871
7-470e-a5e4-01a8bd75b769%40googlegroups.com
https://groups.google.com/d/msgid/elasticsearch/c63ac6bb-8717-470e-a5e4-01a8bd75b769%40googlegroups.com?utm_medium=email&utm_source=footer
.
For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google
Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it,
send an email to elasticsearc...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/
msgid/elasticsearch/CALY%3DcQDD0JYJeX%2BCmV%3DGACekwofjUYFQvoS
WQ86Th3r-MBWZtw%40mail.gmail.com
https://groups.google.com/d/msgid/elasticsearch/CALY%3DcQDD0JYJeX%2BCmV%3DGACekwofjUYFQvoSWQ86Th3r-MBWZtw%40mail.gmail.com?utm_medium=email&utm_source=footer
.

For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google
Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send
an email to elasticsearc...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/
msgid/elasticsearch/4d3e5636-1124-4dcb-b6be-b62f893cae39%
40googlegroups.com
https://groups.google.com/d/msgid/elasticsearch/4d3e5636-1124-4dcb-b6be-b62f893cae39%40googlegroups.com?utm_medium=email&utm_source=footer
.

For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups
"elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to elasticsearc...@googlegroups.com <javascript:>.
To view this discussion on the web visit
https://groups.google.com/d/msgid/elasticsearch/725d437c-988d-4462-98db-dc281c7e438c%40googlegroups.com
https://groups.google.com/d/msgid/elasticsearch/725d437c-988d-4462-98db-dc281c7e438c%40googlegroups.com?utm_medium=email&utm_source=footer
.
For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/ebad6123-2700-4d25-aba0-f38e9ed61a1e%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.