Index Mapping -- Type: Text and Keyword vs Type: Keyword and Text

Elastic Stack Elasticsearch
1

What is the difference between how Elasticsearch and Kibana handle these two mappings?

First:
"Windows": {
"type": "keyword",
"ignore_above": 256,
"fields": {
"text": {
"type": "text"
}
}
}

Second:
"Windows": {
"type": "text",
"fields": {
"keyword": {
"type": "keyword",
"ignore_above": 256
}
}
}

I noticed that in the first case, the main field "Windows" is now Sortable in Kibana (YAY!) and now there is a hidden field called "Windows.text".

I noticed that in the second case, the main field "Windows" is now NOT sortable in Kibana (Boo!) and there is a hidden field called "Windows.keyword"

How else will this impact Elasticsearch or Kibana? What other functionality am i trading here?

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.