# Index: no but field still searchable? ES 2.3.x
**URL:** https://discuss.elastic.co/t/index-no-but-field-still-searchable-es-2-3-x/62814
**Category:** Elasticsearch
**Created:** [October 12, 2016, 2:08pm UTC](https://discuss.elastic.co/t/index-no-but-field-still-searchable-es-2-3-x/62814 "2016-10-12T14:08:38Z")
**Posts on this page:** 6
**Page:** 1
### Author:  [@Blight](https://discuss.elastic.co/u/Blight)
#### Post date: [October 12, 2016, 2:08pm UTC](https://discuss.elastic.co/t/index-no-but-field-still-searchable-es-2-3-x/62814/1 "2016-10-12T14:08:38Z")
Hi,
I have one field that has "index": "no", but I can see that it's still searchable in Kibana, what could be the issue? I can't find the problem here, it's running on ES 2.3. By still searchable in Kibana it's because I see that the zoom icon on the field is black and not greyed when your field is not searchable.
Field mapping:
```
{
app-2016.10.12:{
mappings:{
app-syslog:{
response:{
full_name:"response",
mapping:{
response:{
type:"string",
index:"no"
}
}
}
}
}
}
}
```
This is the template I'm using:
```
{
"order": 0,
"template": "*",
"mappings": {
"app-syslog": {
"properties": {
"request": { "index": "no", "type": "string" },
"response": { "index": "no", "type": "string" }
}
},
"_default_": {
"_all": {
"enabled": true
},
"_source": {
"enabled": true
},
"dynamic_templates": [
{
"notanalyzed": {
"match": "*",
"match_mapping_type": "string",
"mapping": {
"type": "string",
"index": "not_analyzed",
"include_in_all": true
}
}
}
]
}
}
}
```
---
### Author:  [@dadoonet](https://discuss.elastic.co/u/dadoonet)
#### Post date: [October 12, 2016, 2:20pm UTC](https://discuss.elastic.co/t/index-no-but-field-still-searchable-es-2-3-x/62814/2 "2016-10-12T14:20:44Z")
I guess it's because Kibana is using `_all` field?
If you search for `request:XYZ` instead of `XYZ` you should see that this field is not searchable.
My 2 cents.
---
### Author:  [@Blight](https://discuss.elastic.co/u/Blight)
#### Post date: [October 12, 2016, 2:25pm UTC](https://discuss.elastic.co/t/index-no-but-field-still-searchable-es-2-3-x/62814/3 "2016-10-12T14:25:17Z")
I thought that too, but the doc says that index: no disables "include\_in\_all" by default.
[https://www.elastic.co/guide/en/elasticsearch/reference/2.3/include-in-all.html](https://www.elastic.co/guide/en/elasticsearch/reference/2.3/include-in-all.html)
---
### Author:  [@dadoonet](https://discuss.elastic.co/u/dadoonet)
#### Post date: [October 12, 2016, 3:21pm UTC](https://discuss.elastic.co/t/index-no-but-field-still-searchable-es-2-3-x/62814/4 "2016-10-12T15:21:42Z")
Yeah my bad. Not supposed to be indexed at all.
I did not reproduce your issue:
```auto
DELETE test
PUT test
PUT test/type/_mapping
{
"type": {
"properties": {
"request": {
"index": "no",
"type": "string"
},
"response": {
"type": "string"
}
}
}
}
PUT test/type/1
{
"request": "abc",
"response": "def"
}
GET test/_search
{
"query": {
"query_string": {
"query": "abc"
}
}
}
GET test/_search
{
"query": {
"query_string": {
"query": "def"
}
}
}
```
Your mapping looks super strange to me:
```auto
{
app-2016.10.12:{
mappings:{
app-syslog:{
response:{
full_name:"response",
mapping:{
response:{
type:"string",
index:"no"
}
}
}
}
}
}
}
```
It does not look at all at what it should be (see my example)
---
### Author:  [@Blight](https://discuss.elastic.co/u/Blight)
#### Post date: [October 12, 2016, 6:25pm UTC](https://discuss.elastic.co/t/index-no-but-field-still-searchable-es-2-3-x/62814/5 "2016-10-12T18:25:12Z")
Thank you, going to try this method if I can reproduce 🙂
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 5, 2017, 10:12pm UTC](https://discuss.elastic.co/t/index-no-but-field-still-searchable-es-2-3-x/62814/6 "2017-07-05T22:12:57Z")