Prevent searching for specific field with query_string query

Elastic Stack Elasticsearch
1

Hello Forum,

is it possible to somehow limit / filter the fields that can be searched using a query_string query?

My use-case is that I have an index which contains privileged information and I want to expose a subset of that data to users. Filtering the output from ES is easy enough, but how can I disallow a user to search for one of the "hidden" fields using the query string query?

Thanks,
Jojo

2

x-pack security module (commercial plugin) supports that OOTB. https://www.elastic.co/guide/en/x-pack/current/field-and-document-access-control.html

3

Thanks, by the lack of additional replies I'm guessing this is the only way to achieve that.