Tags vs Fields for conditional search

Which way is more efficient for conditional searching?
i know little of the implementation but according to my way of thinking Tags should be better is that correct?
If so i'd like to know the implementation difference that makes it so

Searching what where?

Conditional search in elasticsearch, using Tags and fields.

Please be explicit and give examples of both of the things you're talking about.

Say i am adding arp table data where each document is a line from that table:
"192.168.0.1","255.255.255.255","ff-ff-ff-ff-ff-ff","static"
each of the value in the line above will be fields.

say i want to add an identifier which will contain a machines name or ip as [Field OR Tag ]
so i could make a query that will show me where on a specific machine there are duplicate fields values.

so my question is, what is more efficient, adding the identifier as tag or field,
thanks

Either is the same thing to LS.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.