# Search with \_all missed some document

**URL:** <https://discuss.elastic.co/t/search-with--all-missed-some-document/12545>\
**Category:** Elasticsearch\
**Created:** [June 25, 2013, 11:23pm UTC](https://discuss.elastic.co/t/search-with--all-missed-some-document/12545 "2013-06-25T23:23:39Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![nixfish](https://avatars.discourse-cdn.com/v4/letter/n/6de8d8/32.png) [@nixfish](https://discuss.elastic.co/u/nixfish)\
**Post date:** [June 25, 2013, 11:23pm UTC](https://discuss.elastic.co/t/search-with--all-missed-some-document/12545/1 "2013-06-25T23:23:39Z")

</div>

Hi,

I run into a weird case, where i indexed three addresses as below.

{

```
"took": 2,
"timed_out": false,
"_shards": {
    "total": 5,
    "successful": 5,
    "failed": 0
},  
"hits": {
    "total": 3,
    "max_score": 1,
    "hits": [
        {   
            "_index": "my_test",
            "_type": "address",
            "_id": "1",
            "_score": 1,
            "_source": {
                "id_address": "1",
                "city": "Mountain View",
                "state": "CA",
                "postal_code": "94040",
                "location": "37.386177,-122.084026",
                "country_code": "US",
                "address": "1000 El Camino Real"
            }   
        },  
        {   
            "_index": "my_test",
            "_type": "address",
            "_id": "2",
            "_score": 1,
            "_source": {
                "id_address": "2",
                "city": "Mountain View",
                "state": "CA",
                "postal_code": "94040",
                "location": "37.386177,-122.084026",
                "country_code": "US",
                "address": "1001 El Camino Real"
            }   
        },  
        {   
            "_index": "my_test",
            "_type": "address",
            "_id": "3",
            "_score": 1,
            "_source": {
                "id_address": "3",
                "city": "Sunnyvale",
                "state": "CA",
                "postal_code": "94089",
                "location": "37.415568,-122.026123",
                "country_code": "US",
                "address": "700 First Ave"
            }   
        }   
    ]   
}   

```

}

If I search use \_all:sunnyvale, there was no hits. But if I use \_all:mountain or \_all:view, i got the 2 addresses in Mountain View. The Sunnyvale address can be hit using city:sunnyvale.

So why \_all:sunnyvale" missed the address?

---

<div class="post-metadata">

**Author:** ![nixfish](https://avatars.discourse-cdn.com/v4/letter/n/6de8d8/32.png) [@nixfish](https://discuss.elastic.co/u/nixfish)\
**Post date:** [June 26, 2013, 12:50am UTC](https://discuss.elastic.co/t/search-with--all-missed-some-document/12545/2 "2013-06-26T00:50:50Z")

</div>

It might have something to do with my definition of the field "city"

city: {  
"type":"string",  
"analyzer":"snowball",  
"filter":["word\_delimiter", "standard"]  
}

After i changed it to be simply

city: { "type": "string }

I could get the hit on the address. Next question: what's the default analyzer and filter for "string" type?

Thanks,

---

<div class="post-metadata">

**Author:** ![nixfish](https://avatars.discourse-cdn.com/v4/letter/n/6de8d8/32.png) [@nixfish](https://discuss.elastic.co/u/nixfish)\
**Post date:** [June 26, 2013, 1:12am UTC](https://discuss.elastic.co/t/search-with--all-missed-some-document/12545/3 "2013-06-26T01:12:22Z")

</div>

Reading the document again, i feel that if i use snowball as the analyzer, then i don't need to add "standard" token filter because it is used by snowball. I wonder if I have this

```
"type": "string",
"analyzer": "snowball",
"filter": ["word_delimiter", "standard"]

```

Will the list of filters OVERRIDE what the analyzer will use or simply be added as ADDITIONAL filters.

Thanks,

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 2:29am UTC](https://discuss.elastic.co/t/search-with--all-missed-some-document/12545/4 "2017-07-06T02:29:30Z")

</div>

Closed on July 6, 2017, 2:29am UTC