Performance different if searching on normal or keyword field?

Ok, thanks a lot. I also thought in this direction, but I wanted to be sure :wink:

Then I have one additional question which is enhancing the original one.

I opnened a different thread for it, but I assume I can answer it with the details you provided:

So if my event has multiple fileds: message, payload, field 1... field n, then it should be faster to name the fields I am searching in, and even faster if I can filter on the keyword field. correct? Because there is one inverted index per field?

Thanks, Andreas