Request without field - Case insensitive mystery

Elastic Stack Kibana
1

Hello !

I have a mystery I can't explain.

Request : process.name:calc.exe > 9 hits 
Request : process.name:CALC.exe > 0 hits
Request : CALC.exe (just it) > 11 hits (included the 9 previous hits )

When I do a request without a field, I have the impression that the request is certainly done on all the fields, but that it is also insensitive ??

How is it possible ?

Thank you for your help,

Florent

2

We think we have found the answer :

  • The .keyword field is case-sensitive
  • The .text field is case-insensitive
3

That is correct :smiley:

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.