I have noticed by default all my data is stored under _source in ElasticSearch.
I have some questions, I would like to clarify as the article below is not clear to me:
In Kibana I see that for a particular index, I have all my fields available as expected, I can search for them and I see they show up as fields under Management_>Index Patterns->Index.
But when I go to Discover tab and select a particular message, and select the JSON output, I see that all my data is stored under _source, and not under fields. Does this mean my data is stored only in _source and the fields are not stored as actual fields?
In JSON output, when I am looking at a message from a particular index that contains fields that are dates, these seem to be added to fields as well as _source. Is this behavior expected, that all date fields are stored as fields automatically?
3)If I remove _source from my index, will all my data be stored under fields automatically?