Scripted field internals

Hi ,
Can someone please explain how scripted fields works internally. For ex. If I add a scripted field which extract the numeric value from existing field using regular expression and used in aggregations. I want to understand and to end execution of the flow i.e. on which nodes the regex will be executed on each document and how the aggregations works on scripted fields. If any blog explains this functionality please share.


Would this be enough to answer your questions?

Let me know if there something else that isn't covered there and I'll try to answer it.

Thank you. I already gone through the link u provided before posting .
I want to understand more on how scripted fields works internally, where these scripts will be executed for each document? Is these fields used normally as other indexed fields in elasticsearch cluster? I am intrested in end to end functionality of scripted fields .


The scripted fields in Kibana are executed individually for each document indeed. And Kibana passes the definition of them to ES on each requests and ES determines if it needs to calculate them. They can be used normally, with some limitations. Overall, they are good if you want to test or debug something in your data, but for day to day use they are no recommended as each search request sent to ES will put more more load on the cluster than normally.

this explains it a bit as well:

Thank you. I got the required information from blog.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.