# How to search non indexed field in elasticsearch **URL:** \ **Category:** Elasticsearch\ **Created:** [November 6, 2014, 4:45am UTC](https://discuss.elastic.co/t/how-to-search-non-indexed-field-in-elasticsearch/20594 "2014-11-06T04:45:57Z")\ **Posts on this page:** 11\ **Page:** 1
**Author:** ![Ramky](https://avatars.discourse-cdn.com/v4/letter/r/b2d939/32.png) [@Ramky](https://discuss.elastic.co/u/Ramky)\ **Post date:** [November 6, 2014, 4:45am UTC](https://discuss.elastic.co/t/how-to-search-non-indexed-field-in-elasticsearch/20594/1 "2014-11-06T04:45:57Z")
I have 10 fields inserted into elasticsearch out of which 5 fields are indexed. Is it possible to search on non indexed field? Thanks in advance. Regards Rama Krishna P -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/c63ac6bb-8717-470e-a5e4-01a8bd75b769%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/c63ac6bb-8717-470e-a5e4-01a8bd75b769%40googlegroups.com). For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). ---
**Author:** ![Ivan](https://avatars.discourse-cdn.com/v4/letter/i/df788c/32.png) [@Ivan](https://discuss.elastic.co/u/Ivan)\ **Post date:** [November 6, 2014, 4:13pm UTC](https://discuss.elastic.co/t/how-to-search-non-indexed-field-in-elasticsearch/20594/2 "2014-11-06T16:13:20Z")
You cannot search/filter on a non-indexed field. -- Ivan On Wed, Nov 5, 2014 at 11:45 PM, ramakrishna panguluri \< [panguluri.ramakrishna@gmail.com](mailto:panguluri.ramakrishna@gmail.com)\> wrote: > I have 10 fields inserted into elasticsearch out of which 5 fields are > indexed. > Is it possible to search on non indexed field? > > Thanks in advance. > > Regards > Rama Krishna P > > -- > You received this message because you are subscribed to the Google Groups > "elasticsearch" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). > To view this discussion on the web visit > [https://groups.google.com/d/msgid/elasticsearch/c63ac6bb-8717-470e-a5e4-01a8bd75b769%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/c63ac6bb-8717-470e-a5e4-01a8bd75b769%40googlegroups.com) > [https://groups.google.com/d/msgid/elasticsearch/c63ac6bb-8717-470e-a5e4-01a8bd75b769%40googlegroups.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/c63ac6bb-8717-470e-a5e4-01a8bd75b769%40googlegroups.com?utm_medium=email&utm_source=footer) > . > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/CALY%3DcQDD0JYJeX%2BCmV%3DGACekwofjUYFQvoSWQ86Th3r-MBWZtw%40mail.gmail.com](https://groups.google.com/d/msgid/elasticsearch/CALY%3DcQDD0JYJeX%2BCmV%3DGACekwofjUYFQvoSWQ86Th3r-MBWZtw%40mail.gmail.com). For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). ---
**Author:** ![nik9000](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nik9000/32/44947_2.png) [@nik9000](https://discuss.elastic.co/u/nik9000)\ **Post date:** [November 6, 2014, 4:14pm UTC](https://discuss.elastic.co/t/how-to-search-non-indexed-field-in-elasticsearch/20594/3 "2014-11-06T16:14:28Z")
You can totally use a script filter checking the field against \_source. Its super duper duper slow but you can do it if you need it rarely. On Thu, Nov 6, 2014 at 11:13 AM, Ivan Brusic [ivan@brusic.com](mailto:ivan@brusic.com) wrote: > You cannot search/filter on a non-indexed field. > > -- > Ivan > > On Wed, Nov 5, 2014 at 11:45 PM, ramakrishna panguluri \< > [panguluri.ramakrishna@gmail.com](mailto:panguluri.ramakrishna@gmail.com)\> wrote: > > > I have 10 fields inserted into elasticsearch out of which 5 fields are > > indexed. > > Is it possible to search on non indexed field? > > > > Thanks in advance. > > > > Regards > > Rama Krishna P > > > > -- > > You received this message because you are subscribed to the Google Groups > > "elasticsearch" group. > > To unsubscribe from this group and stop receiving emails from it, send an > > email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). > > To view this discussion on the web visit > > [https://groups.google.com/d/msgid/elasticsearch/c63ac6bb-8717-470e-a5e4-01a8bd75b769%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/c63ac6bb-8717-470e-a5e4-01a8bd75b769%40googlegroups.com) > > [https://groups.google.com/d/msgid/elasticsearch/c63ac6bb-8717-470e-a5e4-01a8bd75b769%40googlegroups.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/c63ac6bb-8717-470e-a5e4-01a8bd75b769%40googlegroups.com?utm_medium=email&utm_source=footer) > > . > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). > > -- > You received this message because you are subscribed to the Google Groups > "elasticsearch" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). > To view this discussion on the web visit > [https://groups.google.com/d/msgid/elasticsearch/CALY%3DcQDD0JYJeX%2BCmV%3DGACekwofjUYFQvoSWQ86Th3r-MBWZtw%40mail.gmail.com](https://groups.google.com/d/msgid/elasticsearch/CALY%3DcQDD0JYJeX%2BCmV%3DGACekwofjUYFQvoSWQ86Th3r-MBWZtw%40mail.gmail.com) > [https://groups.google.com/d/msgid/elasticsearch/CALY%3DcQDD0JYJeX%2BCmV%3DGACekwofjUYFQvoSWQ86Th3r-MBWZtw%40mail.gmail.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/CALY%3DcQDD0JYJeX%2BCmV%3DGACekwofjUYFQvoSWQ86Th3r-MBWZtw%40mail.gmail.com?utm_medium=email&utm_source=footer) > . > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/CAPmjWd2LDuCHOF-7gACn72N1O1ra4Erm%2BnfJ2bS-LQ-UFxQu3g%40mail.gmail.com](https://groups.google.com/d/msgid/elasticsearch/CAPmjWd2LDuCHOF-7gACn72N1O1ra4Erm%2BnfJ2bS-LQ-UFxQu3g%40mail.gmail.com). For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). ---
**Author:** ![Ramky](https://avatars.discourse-cdn.com/v4/letter/r/b2d939/32.png) [@Ramky](https://discuss.elastic.co/u/Ramky)\ **Post date:** [November 7, 2014, 7:11am UTC](https://discuss.elastic.co/t/how-to-search-non-indexed-field-in-elasticsearch/20594/4 "2014-11-07T07:11:30Z")
Thanks Nikolas Everett for your quick reply. Can you please provide me example to execute the same. I tried multiple times but unable to execute. Thanks in advance On Thursday, November 6, 2014 9:44:55 PM UTC+5:30, Nikolas Everett wrote: > You can totally use a script filter checking the field against \_source. > Its super duper duper slow but you can do it if you need it rarely. > > On Thu, Nov 6, 2014 at 11:13 AM, Ivan Brusic \<[iv...@brusic.com](mailto:iv...@brusic.com) > \\> wrote: > > > You cannot search/filter on a non-indexed field. > > > > -- > > Ivan > > > > On Wed, Nov 5, 2014 at 11:45 PM, ramakrishna panguluri \< > > [panguluri....@gmail.com](mailto:panguluri....@gmail.com) \\> wrote: > > > > > I have 10 fields inserted into elasticsearch out of which 5 fields are > > > indexed. > > > Is it possible to search on non indexed field? > > > > > > Thanks in advance. > > > > > > Regards > > > Rama Krishna P > > > > > > -- > > > You received this message because you are subscribed to the Google > > > Groups "elasticsearch" group. > > > To unsubscribe from this group and stop receiving emails from it, send > > > an email to [elasticsearc...@googlegroups.com](mailto:elasticsearc...@googlegroups.com) \. > > > To view this discussion on the web visit > > > [https://groups.google.com/d/msgid/elasticsearch/c63ac6bb-8717-470e-a5e4-01a8bd75b769%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/c63ac6bb-8717-470e-a5e4-01a8bd75b769%40googlegroups.com) > > > [https://groups.google.com/d/msgid/elasticsearch/c63ac6bb-8717-470e-a5e4-01a8bd75b769%40googlegroups.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/c63ac6bb-8717-470e-a5e4-01a8bd75b769%40googlegroups.com?utm_medium=email&utm_source=footer) > > > . > > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). > > > > -- > > You received this message because you are subscribed to the Google Groups > > "elasticsearch" group. > > To unsubscribe from this group and stop receiving emails from it, send an > > email to [elasticsearc...@googlegroups.com](mailto:elasticsearc...@googlegroups.com) \. > > To view this discussion on the web visit > > [https://groups.google.com/d/msgid/elasticsearch/CALY%3DcQDD0JYJeX%2BCmV%3DGACekwofjUYFQvoSWQ86Th3r-MBWZtw%40mail.gmail.com](https://groups.google.com/d/msgid/elasticsearch/CALY%3DcQDD0JYJeX%2BCmV%3DGACekwofjUYFQvoSWQ86Th3r-MBWZtw%40mail.gmail.com) > > [https://groups.google.com/d/msgid/elasticsearch/CALY%3DcQDD0JYJeX%2BCmV%3DGACekwofjUYFQvoSWQ86Th3r-MBWZtw%40mail.gmail.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/CALY%3DcQDD0JYJeX%2BCmV%3DGACekwofjUYFQvoSWQ86Th3r-MBWZtw%40mail.gmail.com?utm_medium=email&utm_source=footer) > > . > > > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/4d3e5636-1124-4dcb-b6be-b62f893cae39%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/4d3e5636-1124-4dcb-b6be-b62f893cae39%40googlegroups.com). For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). ---
**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Post date:** [November 7, 2014, 8:44am UTC](https://discuss.elastic.co/t/how-to-search-non-indexed-field-in-elasticsearch/20594/6 "2014-11-07T08:44:32Z")
> wildcard query is also working on non-indexed fields. Are you sure? I don’t think so. -- David Pilato | Technical Advocate | [Elasticsearch.com](http://Elasticsearch.com) [http://elasticsearch.com/](http://elasticsearch.com/) @dadoonet [https://twitter.com/dadoonet](https://twitter.com/dadoonet) | @elasticsearchfr [https://twitter.com/elasticsearchfr](https://twitter.com/elasticsearchfr) | @scrutmydocs [https://twitter.com/scrutmydocs](https://twitter.com/scrutmydocs) -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/5E0F733A-C7D5-452F-951A-E104A92ACF1C%40pilato.fr](https://groups.google.com/d/msgid/elasticsearch/5E0F733A-C7D5-452F-951A-E104A92ACF1C%40pilato.fr). For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). ---
**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Post date:** [November 7, 2014, 9:28am UTC](https://discuss.elastic.co/t/how-to-search-non-indexed-field-in-elasticsearch/20594/8 "2014-11-07T09:28:27Z")
Not analyzed does not mean not indexed. It is indexed but Strings are not analyzed and indexed as is. -- David 😉 Twitter : @dadoonet / @elasticsearchfr / @scrutmydocs > Le 7 nov. 2014 à 10:11, Georgi Ivanov [georgi.r.ivanov@gmail.com](mailto:georgi.r.ivanov@gmail.com) a écrit : > > Taken from here > [Elasticsearch Platform — Find real-time answers at scale | Elastic](http://www.elasticsearch.org/guide/en/elasticsearch/reference/current/query-dsl-wildcard-query.html#query-dsl-wildcard-query) > "Matches documents that have fields matching a wildcard expression (not analyzed)" > > I also use wildcard on non analyzed fields, and it is working. > > 2014-11-07 9:44 GMT+01:00 David Pilato [david@pilato.fr](mailto:david@pilato.fr): > > > > wildcard query is also working on non-indexed fields. > > > > Are you sure? > > I don’t think so. > > > > -- > > David Pilato | Technical Advocate | [Elasticsearch.com](http://Elasticsearch.com) > > @dadoonet | @elasticsearchfr | @scrutmydocs > > > > -- > > You received this message because you are subscribed to a topic in the Google Groups "elasticsearch" group. > > To unsubscribe from this topic, visit [https://groups.google.com/d/topic/elasticsearch/iGBwluGlWpc/unsubscribe](https://groups.google.com/d/topic/elasticsearch/iGBwluGlWpc/unsubscribe). > > To unsubscribe from this group and all its topics, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). > > To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/5E0F733A-C7D5-452F-951A-E104A92ACF1C%40pilato.fr](https://groups.google.com/d/msgid/elasticsearch/5E0F733A-C7D5-452F-951A-E104A92ACF1C%40pilato.fr). > > > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). > > -- > You received this message because you are subscribed to the Google Groups "elasticsearch" group. > To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). > To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/CAGKxwgkYrJ8mstHk%2Bt8pdTUanZoVpTeLF9dh8-viV%2BYymx%3DdAA%40mail.gmail.com](https://groups.google.com/d/msgid/elasticsearch/CAGKxwgkYrJ8mstHk%2Bt8pdTUanZoVpTeLF9dh8-viV%2BYymx%3DdAA%40mail.gmail.com). > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/A7B93A96-CCF8-4AF7-A083-6566113BC192%40pilato.fr](https://groups.google.com/d/msgid/elasticsearch/A7B93A96-CCF8-4AF7-A083-6566113BC192%40pilato.fr). For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). ---
**Author:** ![nik9000](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nik9000/32/44947_2.png) [@nik9000](https://discuss.elastic.co/u/nik9000)\ **Post date:** [November 7, 2014, 12:18pm UTC](https://discuss.elastic.co/t/how-to-search-non-indexed-field-in-elasticsearch/20594/9 "2014-11-07T12:18:29Z")
The first example on > **[Elasticsearch Platform — Find real-time answers at scale](https://www.elastic.co)** > > Power insights and outcomes with the Elasticsearch Platform and AI. See into your data and find answers that matter with enterprise solutions designed to help you build, observe, and protect. Try Elasticsearch free today. should just if you replace \> with .equals On Fri, Nov 7, 2014 at 2:11 AM, ramky [panguluri.ramakrishna@gmail.com](mailto:panguluri.ramakrishna@gmail.com) wrote: > Thanks Nikolas Everett for your quick reply. > > Can you please provide me example to execute the same. I tried multiple > times but unable to execute. > > Thanks in advance > > On Thursday, November 6, 2014 9:44:55 PM UTC+5:30, Nikolas Everett wrote: > > > You can totally use a script filter checking the field against \_source. > > Its super duper duper slow but you can do it if you need it rarely. > > > > On Thu, Nov 6, 2014 at 11:13 AM, Ivan Brusic [iv...@brusic.com](mailto:iv...@brusic.com) wrote: > > > > > You cannot search/filter on a non-indexed field. > > > > > > -- > > > Ivan > > > > > > On Wed, Nov 5, 2014 at 11:45 PM, ramakrishna panguluri \< > > > [panguluri....@gmail.com](mailto:panguluri....@gmail.com)\> wrote: > > > > > > > I have 10 fields inserted into elasticsearch out of which 5 fields are > > > > indexed. > > > > Is it possible to search on non indexed field? > > > > > > > > Thanks in advance. > > > > > > > > Regards > > > > Rama Krishna P > > > > > > > > -- > > > > You received this message because you are subscribed to the Google > > > > Groups "elasticsearch" group. > > > > To unsubscribe from this group and stop receiving emails from it, send > > > > an email to [elasticsearc...@googlegroups.com](mailto:elasticsearc...@googlegroups.com). > > > > To view this discussion on the web visit [https://groups.google.com/d/](https://groups.google.com/d/) > > > > msgid/elasticsearch/c63ac6bb-8717-470e-a5e4-01a8bd75b769% > > > > [40googlegroups.com](http://40googlegroups.com) > > > > [https://groups.google.com/d/msgid/elasticsearch/c63ac6bb-8717-470e-a5e4-01a8bd75b769%40googlegroups.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/c63ac6bb-8717-470e-a5e4-01a8bd75b769%40googlegroups.com?utm_medium=email&utm_source=footer) > > > > . > > > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). > > > > > > -- > > > You received this message because you are subscribed to the Google > > > Groups "elasticsearch" group. > > > To unsubscribe from this group and stop receiving emails from it, send > > > an email to [elasticsearc...@googlegroups.com](mailto:elasticsearc...@googlegroups.com). > > > To view this discussion on the web visit [https://groups.google.com/d/](https://groups.google.com/d/) > > > msgid/elasticsearch/CALY%3DcQDD0JYJeX%2BCmV%3DGACekwofjUYFQvoSWQ86Th3r- > > > MBWZtw%[40mail.gmail.com](http://40mail.gmail.com) > > > [https://groups.google.com/d/msgid/elasticsearch/CALY%3DcQDD0JYJeX%2BCmV%3DGACekwofjUYFQvoSWQ86Th3r-MBWZtw%40mail.gmail.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/CALY%3DcQDD0JYJeX%2BCmV%3DGACekwofjUYFQvoSWQ86Th3r-MBWZtw%40mail.gmail.com?utm_medium=email&utm_source=footer) > > > . > > > > > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). > > > > -- > > You received this message because you are subscribed to the Google Groups > > "elasticsearch" group. > > To unsubscribe from this group and stop receiving emails from it, send an > > email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). > > To view this discussion on the web visit > > [https://groups.google.com/d/msgid/elasticsearch/4d3e5636-1124-4dcb-b6be-b62f893cae39%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/4d3e5636-1124-4dcb-b6be-b62f893cae39%40googlegroups.com) > > [https://groups.google.com/d/msgid/elasticsearch/4d3e5636-1124-4dcb-b6be-b62f893cae39%40googlegroups.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/4d3e5636-1124-4dcb-b6be-b62f893cae39%40googlegroups.com?utm_medium=email&utm_source=footer) > > . > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/CAPmjWd1CcCUuNPhM65dR1fngNHGCeMdc-18tdvhH-2ga%3D\_3jGg%40mail.gmail.com](https://groups.google.com/d/msgid/elasticsearch/CAPmjWd1CcCUuNPhM65dR1fngNHGCeMdc-18tdvhH-2ga%3D_3jGg%40mail.gmail.com). For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). ---
**Author:** ![Ramky](https://avatars.discourse-cdn.com/v4/letter/r/b2d939/32.png) [@Ramky](https://discuss.elastic.co/u/Ramky)\ **Post date:** [November 10, 2014, 6:01am UTC](https://discuss.elastic.co/t/how-to-search-non-indexed-field-in-elasticsearch/20594/10 "2014-11-10T06:01:16Z")
Thanks Nikolas. I tried the query but it failed to search on non-indexed field. Query i used is { "filter": { "script": { "script": "doc['service'].value == http" } } } "service" is non-indexed field. Exception after execution is {[x3a9BIGLRwOdhwpsaUZbrw][siem0511][0]: QueryPhaseExecutionException[[siem0511][0]: query[ConstantScore(cache(\_type:siem))],from[0],size[10]: Query Failed [Failed to execute main query]]; nested: CompileException[[Error: No field found for [service] in mapping with types [siem]]\n[Near : {... doc['service'].value == http ....}]\n ^\n[Line: 1, Column: 1]]; nested: ElasticsearchIllegalArgumentException[No field found for [service] in mapping with types [siem]]; } Please help. Thanks in advance. Regards Ramky On Friday, November 7, 2014 5:49:04 PM UTC+5:30, Nikolas Everett wrote: > The first example on > [Elasticsearch Platform — Find real-time answers at scale | Elastic](http://www.elasticsearch.org/guide/en/elasticsearch/reference/current/query-dsl-script-filter.html#query-dsl-script-filter) > should just if you replace \> with .equals > > On Fri, Nov 7, 2014 at 2:11 AM, ramky \<[panguluri....@gmail.com](mailto:panguluri....@gmail.com) > \\> wrote: > > > Thanks Nikolas Everett for your quick reply. > > > > Can you please provide me example to execute the same. I tried multiple > > times but unable to execute. > > > > Thanks in advance > > > > On Thursday, November 6, 2014 9:44:55 PM UTC+5:30, Nikolas Everett wrote: > > > > > You can totally use a script filter checking the field against \_source. > > > Its super duper duper slow but you can do it if you need it rarely. > > > > > > On Thu, Nov 6, 2014 at 11:13 AM, Ivan Brusic [iv...@brusic.com](mailto:iv...@brusic.com) wrote: > > > > > > > You cannot search/filter on a non-indexed field. > > > > > > > > -- > > > > Ivan > > > > > > > > On Wed, Nov 5, 2014 at 11:45 PM, ramakrishna panguluri \< > > > > [panguluri....@gmail.com](mailto:panguluri....@gmail.com)\> wrote: > > > > > > > > > I have 10 fields inserted into elasticsearch out of which 5 fields are > > > > > indexed. > > > > > Is it possible to search on non indexed field? > > > > > > > > > > Thanks in advance. > > > > > > > > > > Regards > > > > > Rama Krishna P > > > > > > > > > > -- > > > > > You received this message because you are subscribed to the Google > > > > > Groups "elasticsearch" group. > > > > > To unsubscribe from this group and stop receiving emails from it, send > > > > > an email to [elasticsearc...@googlegroups.com](mailto:elasticsearc...@googlegroups.com). > > > > > To view this discussion on the web visit [https://groups.google.com/d/](https://groups.google.com/d/) > > > > > msgid/elasticsearch/c63ac6bb-8717-470e-a5e4-01a8bd75b769% > > > > > [40googlegroups.com](http://40googlegroups.com) > > > > > [https://groups.google.com/d/msgid/elasticsearch/c63ac6bb-8717-470e-a5e4-01a8bd75b769%40googlegroups.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/c63ac6bb-8717-470e-a5e4-01a8bd75b769%40googlegroups.com?utm_medium=email&utm_source=footer) > > > > > . > > > > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). > > > > > > > > -- > > > > You received this message because you are subscribed to the Google > > > > Groups "elasticsearch" group. > > > > To unsubscribe from this group and stop receiving emails from it, send > > > > an email to [elasticsearc...@googlegroups.com](mailto:elasticsearc...@googlegroups.com). > > > > To view this discussion on the web visit [https://groups.google.com/d/](https://groups.google.com/d/) > > > > msgid/elasticsearch/CALY%3DcQDD0JYJeX%2BCmV%3DGACekwofjUYFQvoSWQ86Th3r- > > > > MBWZtw%[40mail.gmail.com](http://40mail.gmail.com) > > > > [https://groups.google.com/d/msgid/elasticsearch/CALY%3DcQDD0JYJeX%2BCmV%3DGACekwofjUYFQvoSWQ86Th3r-MBWZtw%40mail.gmail.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/CALY%3DcQDD0JYJeX%2BCmV%3DGACekwofjUYFQvoSWQ86Th3r-MBWZtw%40mail.gmail.com?utm_medium=email&utm_source=footer) > > > > . > > > > > > > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). > > > > > > -- > > > You received this message because you are subscribed to the Google Groups > > > "elasticsearch" group. > > > To unsubscribe from this group and stop receiving emails from it, send an > > > email to [elasticsearc...@googlegroups.com](mailto:elasticsearc...@googlegroups.com) \. > > > To view this discussion on the web visit > > > [https://groups.google.com/d/msgid/elasticsearch/4d3e5636-1124-4dcb-b6be-b62f893cae39%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/4d3e5636-1124-4dcb-b6be-b62f893cae39%40googlegroups.com) > > > [https://groups.google.com/d/msgid/elasticsearch/4d3e5636-1124-4dcb-b6be-b62f893cae39%40googlegroups.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/4d3e5636-1124-4dcb-b6be-b62f893cae39%40googlegroups.com?utm_medium=email&utm_source=footer) > > > . > > > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/725d437c-988d-4462-98db-dc281c7e438c%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/725d437c-988d-4462-98db-dc281c7e438c%40googlegroups.com). For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). ---
**Author:** ![nik9000](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nik9000/32/44947_2.png) [@nik9000](https://discuss.elastic.co/u/nik9000)\ **Post date:** [November 10, 2014, 1:37pm UTC](https://discuss.elastic.co/t/how-to-search-non-indexed-field-in-elasticsearch/20594/11 "2014-11-10T13:37:50Z")
Use \_source['service'] instead. Much slower but doesn't need to the field indexed. On Nov 10, 2014 1:01 AM, "ramky" [panguluri.ramakrishna@gmail.com](mailto:panguluri.ramakrishna@gmail.com) wrote: > Thanks Nikolas. > I tried the query but it failed to search on non-indexed field. > > Query i used is > { > "filter": { > "script": { > "script": "doc['service'].value == http" > } > } > } > "service" is non-indexed field. > > Exception after execution is > {[x3a9BIGLRwOdhwpsaUZbrw][siem0511][0]: > QueryPhaseExecutionException[[siem0511][0]: > query[ConstantScore(cache(\_type:siem))],from[0],size[10]: Query Failed > [Failed to execute main query]]; nested: CompileException[[Error: No field > found for [service] in mapping with types [siem]]\n[Near : {... > doc['service'].value == http ....}]\n ^\n[Line: 1, Column: 1]]; > nested: ElasticsearchIllegalArgumentException[No field found for [service] > in mapping with types [siem]]; } > > Please help. > > Thanks in advance. > > Regards > Ramky > > On Friday, November 7, 2014 5:49:04 PM UTC+5:30, Nikolas Everett wrote: > > > The first example on [Elasticsearch Platform — Find real-time answers at scale | Elastic](http://www.elasticsearch.org/guide/en/elasticsearch/) > > reference/current/query-dsl-script-filter.html#query-dsl-script-filter > > should just if you replace \> with .equals > > > > On Fri, Nov 7, 2014 at 2:11 AM, ramky [panguluri....@gmail.com](mailto:panguluri....@gmail.com) wrote: > > > > > Thanks Nikolas Everett for your quick reply. > > > > > > Can you please provide me example to execute the same. I tried multiple > > > times but unable to execute. > > > > > > Thanks in advance > > > > > > On Thursday, November 6, 2014 9:44:55 PM UTC+5:30, Nikolas Everett wrote: > > > > > > > You can totally use a script filter checking the field against > > > > \_source. Its super duper duper slow but you can do it if you need it > > > > rarely. > > > > > > > > On Thu, Nov 6, 2014 at 11:13 AM, Ivan Brusic [iv...@brusic.com](mailto:iv...@brusic.com) wrote: > > > > > > > > > You cannot search/filter on a non-indexed field. > > > > > > > > > > -- > > > > > Ivan > > > > > > > > > > On Wed, Nov 5, 2014 at 11:45 PM, ramakrishna panguluri \< > > > > > [panguluri....@gmail.com](mailto:panguluri....@gmail.com)\> wrote: > > > > > > > > > > > I have 10 fields inserted into elasticsearch out of which 5 fields > > > > > > are indexed. > > > > > > Is it possible to search on non indexed field? > > > > > > > > > > > > Thanks in advance. > > > > > > > > > > > > Regards > > > > > > Rama Krishna P > > > > > > > > > > > > -- > > > > > > You received this message because you are subscribed to the Google > > > > > > Groups "elasticsearch" group. > > > > > > To unsubscribe from this group and stop receiving emails from it, > > > > > > send an email to [elasticsearc...@googlegroups.com](mailto:elasticsearc...@googlegroups.com). > > > > > > To view this discussion on the web visit [https://groups.google.com/d/](https://groups.google.com/d/) > > > > > > msgid/elasticsearch/c63ac6bb-8717-470e-a5e4-01a8bd75b769%40goo > > > > > > [glegroups.com](http://glegroups.com) > > > > > > [https://groups.google.com/d/msgid/elasticsearch/c63ac6bb-8717-470e-a5e4-01a8bd75b769%40googlegroups.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/c63ac6bb-8717-470e-a5e4-01a8bd75b769%40googlegroups.com?utm_medium=email&utm_source=footer) > > > > > > . > > > > > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). > > > > > > > > > > -- > > > > > You received this message because you are subscribed to the Google > > > > > Groups "elasticsearch" group. > > > > > To unsubscribe from this group and stop receiving emails from it, send > > > > > an email to [elasticsearc...@googlegroups.com](mailto:elasticsearc...@googlegroups.com). > > > > > To view this discussion on the web visit [https://groups.google.com/d/](https://groups.google.com/d/) > > > > > msgid/elasticsearch/CALY%3DcQDD0JYJeX%2BCmV%3DGACekwofjUYFQvoS > > > > > WQ86Th3r-MBWZtw%[40mail.gmail.com](http://40mail.gmail.com) > > > > > [https://groups.google.com/d/msgid/elasticsearch/CALY%3DcQDD0JYJeX%2BCmV%3DGACekwofjUYFQvoSWQ86Th3r-MBWZtw%40mail.gmail.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/CALY%3DcQDD0JYJeX%2BCmV%3DGACekwofjUYFQvoSWQ86Th3r-MBWZtw%40mail.gmail.com?utm_medium=email&utm_source=footer) > > > > > . > > > > > > > > > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). > > > > > > > > -- > > > > You received this message because you are subscribed to the Google > > > > Groups "elasticsearch" group. > > > > To unsubscribe from this group and stop receiving emails from it, send > > > > an email to [elasticsearc...@googlegroups.com](mailto:elasticsearc...@googlegroups.com). > > > > To view this discussion on the web visit [https://groups.google.com/d/](https://groups.google.com/d/) > > > > msgid/elasticsearch/4d3e5636-1124-4dcb-b6be-b62f893cae39% > > > > [40googlegroups.com](http://40googlegroups.com) > > > > [https://groups.google.com/d/msgid/elasticsearch/4d3e5636-1124-4dcb-b6be-b62f893cae39%40googlegroups.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/4d3e5636-1124-4dcb-b6be-b62f893cae39%40googlegroups.com?utm_medium=email&utm_source=footer) > > > > . > > > > > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). > > > > -- > > You received this message because you are subscribed to the Google Groups > > "elasticsearch" group. > > To unsubscribe from this group and stop receiving emails from it, send an > > email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). > > To view this discussion on the web visit > > [https://groups.google.com/d/msgid/elasticsearch/725d437c-988d-4462-98db-dc281c7e438c%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/725d437c-988d-4462-98db-dc281c7e438c%40googlegroups.com) > > [https://groups.google.com/d/msgid/elasticsearch/725d437c-988d-4462-98db-dc281c7e438c%40googlegroups.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/725d437c-988d-4462-98db-dc281c7e438c%40googlegroups.com?utm_medium=email&utm_source=footer) > > . > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/CAPmjWd1Yp%2BY%3Dm%2BRhrJMMCBFdJ\_Vg57PH8fP9\_WE3neWB6cjH%3DA%40mail.gmail.com](https://groups.google.com/d/msgid/elasticsearch/CAPmjWd1Yp%2BY%3Dm%2BRhrJMMCBFdJ_Vg57PH8fP9_WE3neWB6cjH%3DA%40mail.gmail.com). For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). ---
**Author:** ![Ramky](https://avatars.discourse-cdn.com/v4/letter/r/b2d939/32.png) [@Ramky](https://discuss.elastic.co/u/Ramky)\ **Post date:** [November 11, 2014, 4:42am UTC](https://discuss.elastic.co/t/how-to-search-non-indexed-field-in-elasticsearch/20594/12 "2014-11-11T04:42:33Z")
Thanks Nikolas. Filtering of non-index data is working now using \_source. Regards Rama Krishna P On Monday, November 10, 2014 7:08:02 PM UTC+5:30, Nikolas Everett wrote: > Use \_source['service'] instead. Much slower but doesn't need to the field > indexed. > On Nov 10, 2014 1:01 AM, "ramky" \<[panguluri....@gmail.com](mailto:panguluri....@gmail.com) \\> > wrote: > > > Thanks Nikolas. > > I tried the query but it failed to search on non-indexed field. > > > > Query i used is > > { > > "filter": { > > "script": { > > "script": "doc['service'].value == http" > > } > > } > > } > > "service" is non-indexed field. > > > > Exception after execution is > > {[x3a9BIGLRwOdhwpsaUZbrw][siem0511][0]: > > QueryPhaseExecutionException[[siem0511][0]: > > query[ConstantScore(cache(\_type:siem))],from[0],size[10]: Query Failed > > [Failed to execute main query]]; nested: CompileException[[Error: No field > > found for [service] in mapping with types [siem]]\n[Near : {... > > doc['service'].value == http ....}]\n ^\n[Line: 1, Column: 1]]; > > nested: ElasticsearchIllegalArgumentException[No field found for [service] > > in mapping with types [siem]]; } > > > > Please help. > > > > Thanks in advance. > > > > Regards > > Ramky > > > > On Friday, November 7, 2014 5:49:04 PM UTC+5:30, Nikolas Everett wrote: > > > > > The first example on [http://www.elasticsearch.org/](http://www.elasticsearch.org/) > > > guide/en/elasticsearch/reference/current/query-dsl- > > > script-filter.html#query-dsl-script-filter should just if you replace \> > > > with .equals > > > > > > On Fri, Nov 7, 2014 at 2:11 AM, ramky [panguluri....@gmail.com](mailto:panguluri....@gmail.com) wrote: > > > > > > > Thanks Nikolas Everett for your quick reply. > > > > > > > > Can you please provide me example to execute the same. I tried multiple > > > > times but unable to execute. > > > > > > > > Thanks in advance > > > > > > > > On Thursday, November 6, 2014 9:44:55 PM UTC+5:30, Nikolas Everett > > > > wrote: > > > > > > > > > You can totally use a script filter checking the field against > > > > > \_source. Its super duper duper slow but you can do it if you need it > > > > > rarely. > > > > > > > > > > On Thu, Nov 6, 2014 at 11:13 AM, Ivan Brusic [iv...@brusic.com](mailto:iv...@brusic.com) wrote: > > > > > > > > > > > You cannot search/filter on a non-indexed field. > > > > > > > > > > > > -- > > > > > > Ivan > > > > > > > > > > > > On Wed, Nov 5, 2014 at 11:45 PM, ramakrishna panguluri \< > > > > > > [panguluri....@gmail.com](mailto:panguluri....@gmail.com)\> wrote: > > > > > > > > > > > > > I have 10 fields inserted into elasticsearch out of which 5 fields > > > > > > > are indexed. > > > > > > > Is it possible to search on non indexed field? > > > > > > > > > > > > > > Thanks in advance. > > > > > > > > > > > > > > Regards > > > > > > > Rama Krishna P > > > > > > > > > > > > > > -- > > > > > > > You received this message because you are subscribed to the Google > > > > > > > Groups "elasticsearch" group. > > > > > > > To unsubscribe from this group and stop receiving emails from it, > > > > > > > send an email to [elasticsearc...@googlegroups.com](mailto:elasticsearc...@googlegroups.com). > > > > > > > To view this discussion on the web visit > > > > > > > [https://groups.google.com/d/msgid/elasticsearch/c63ac6bb-871](https://groups.google.com/d/msgid/elasticsearch/c63ac6bb-871) > > > > > > > 7-470e-a5e4-01a8bd75b769%[40googlegroups.com](http://40googlegroups.com) > > > > > > > [https://groups.google.com/d/msgid/elasticsearch/c63ac6bb-8717-470e-a5e4-01a8bd75b769%40googlegroups.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/c63ac6bb-8717-470e-a5e4-01a8bd75b769%40googlegroups.com?utm_medium=email&utm_source=footer) > > > > > > > . > > > > > > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). > > > > > > > > > > > > -- > > > > > > You received this message because you are subscribed to the Google > > > > > > Groups "elasticsearch" group. > > > > > > To unsubscribe from this group and stop receiving emails from it, > > > > > > send an email to [elasticsearc...@googlegroups.com](mailto:elasticsearc...@googlegroups.com). > > > > > > To view this discussion on the web visit [https://groups.google.com/d/](https://groups.google.com/d/) > > > > > > msgid/elasticsearch/CALY%3DcQDD0JYJeX%2BCmV%3DGACekwofjUYFQvoS > > > > > > WQ86Th3r-MBWZtw%[40mail.gmail.com](http://40mail.gmail.com) > > > > > > [https://groups.google.com/d/msgid/elasticsearch/CALY%3DcQDD0JYJeX%2BCmV%3DGACekwofjUYFQvoSWQ86Th3r-MBWZtw%40mail.gmail.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/CALY%3DcQDD0JYJeX%2BCmV%3DGACekwofjUYFQvoSWQ86Th3r-MBWZtw%40mail.gmail.com?utm_medium=email&utm_source=footer) > > > > > > . > > > > > > > > > > > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). > > > > > > > > > > -- > > > > > You received this message because you are subscribed to the Google > > > > > Groups "elasticsearch" group. > > > > > To unsubscribe from this group and stop receiving emails from it, send > > > > > an email to [elasticsearc...@googlegroups.com](mailto:elasticsearc...@googlegroups.com). > > > > > To view this discussion on the web visit [https://groups.google.com/d/](https://groups.google.com/d/) > > > > > msgid/elasticsearch/4d3e5636-1124-4dcb-b6be-b62f893cae39% > > > > > [40googlegroups.com](http://40googlegroups.com) > > > > > [https://groups.google.com/d/msgid/elasticsearch/4d3e5636-1124-4dcb-b6be-b62f893cae39%40googlegroups.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/4d3e5636-1124-4dcb-b6be-b62f893cae39%40googlegroups.com?utm_medium=email&utm_source=footer) > > > > > . > > > > > > > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). > > > > > > -- > > > You received this message because you are subscribed to the Google Groups > > > "elasticsearch" group. > > > To unsubscribe from this group and stop receiving emails from it, send an > > > email to [elasticsearc...@googlegroups.com](mailto:elasticsearc...@googlegroups.com) \. > > > To view this discussion on the web visit > > > [https://groups.google.com/d/msgid/elasticsearch/725d437c-988d-4462-98db-dc281c7e438c%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/725d437c-988d-4462-98db-dc281c7e438c%40googlegroups.com) > > > [https://groups.google.com/d/msgid/elasticsearch/725d437c-988d-4462-98db-dc281c7e438c%40googlegroups.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/725d437c-988d-4462-98db-dc281c7e438c%40googlegroups.com?utm_medium=email&utm_source=footer) > > > . > > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/ebad6123-2700-4d25-aba0-f38e9ed61a1e%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/ebad6123-2700-4d25-aba0-f38e9ed61a1e%40googlegroups.com). For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 6, 2017, 12:50am UTC](https://discuss.elastic.co/t/how-to-search-non-indexed-field-in-elasticsearch/20594/13 "2017-07-06T00:50:56Z")