You are storing every string field twice, as a text and as a keyword.
Have you run a force merge on the index?
You don't need the not_analyzed, if you set it as a keyword it does that automatically.[quote="Beuhlet_Reseau, post:1, topic:84513"]
"translog": {
"sync_interval": "5s",
"durability": "async"
}
[/quote]
Be very, very, very careful changing this. If you are happy with potential data loss then you don't need to change anything.
This blog post may be a bit old, but is still quite useful. Enabling best_compression is an easy way to save some space, but does result in slightly higher CPU usage. Not having a lot of very small shards is also likely to help improve compression ratios.
@Christian_Dahlqvist You means that not analyzed is by default ? I don't understand.
=> The twice storage of fields (string + keyword) is mandatory ?
=> String is always not analyzed if i have keyword
=> If i don't want analyze few keywords, it's possible ?
I have disable _all and i have a rate of decrease about 30% of space disk.
=> _All field is useless i hope (I do not understand very well explain in documentation...)
This is controlled through mappings and can be defined based on how you need to be able to query the data.
Yes, the string field mappings were updated in Elasticsearch 5.x and the old not_analyzed setting was replaced by the keyword mapping.
I am not sure I understand what you mean. Through the mappings you can control how you want to index and analyze the fields and you can even configure fields to not be indexed at all.
The _all field is not useless. If you use Kibana and add filtering through the search bar without specifying. specific field, it is the _all field that is used behind the scenes. For some use cases this is a perfectly acceptable trade-off, but it is not the right thing for everyone, so check if/how it affects the user experience.
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.