Hi I can not see any results in my raw fields..
This is my index template:
{ "log-2015.12.02": { "aliases": {}, "mappings": { "_default_": { "_all": { "enabled": true, "omit_norms": true }, "dynamic_templates": [ { "message_field": { "mapping": { "index": "analyzed", "omit_norms": true, "type": "string", "fields": { "raw": { "ignore_above": 256, "index": "not_analyzed", "type": "string" } } }, "match": "message", "match_mapping_type": "string" } }, { "string_fields": { "mapping": { "index": "analyzed", "omit_norms": true, "type": "string", "fields": { "raw": { "ignore_above": 2, "index": "not_analyzed", "type": "string" } } }, "match": "*", "match_mapping_type": "string" } } ] }, "logEvent": { "_all": { "enabled": true, "omit_norms": true }, "dynamic_templates": [ { "message_field": { "mapping": { "index": "analyzed", "omit_norms": true, "type": "string", "fields": { "raw": { "ignore_above": 256, "index": "not_analyzed", "type": "string" } } }, "match": "message", "match_mapping_type": "string" } }, { "string_fields": { "mapping": { "index": "analyzed", "omit_norms": true, "type": "string", "fields": { "raw": { "ignore_above": 2, "index": "not_analyzed", "type": "string" } } }, "match": "*", "match_mapping_type": "string" } } ], "properties": { "className": { "type": "string", "norms": { "enabled": false }, "fields": { "raw": { "type": "string", "index": "not_analyzed", "ignore_above": 2 } } }, "messageObject": { "type": "object" }, "properties": { "properties": { "@timestamp": { "type": "date", "format": "strict_date_optional_time||epoch_millis" }, "page": { "type": "string", "norms": { "enabled": false }, "fields": { "raw": { "type": "string", "index": "not_analyzed", "ignore_above": 2 } } } } } } } }, "settings": { "index": { "creation_date": "1449044015188", "refresh_interval": "5s", "number_of_shards": "5", "number_of_replicas": "1", "uuid": "mqENQQ_5QEu1rsaJRik_qg", "version": { "created": "2000099" } } }, "warmers": {} },
In the non .raw fields I can see all my results.. Why is this? Please help me!