Hello all ! I'm trying to understand "enable: false" mapping setting I don't want to index a specific field : syslog_timestamp To achieve this, I mapped this field with "enabled: false" like this (extract of Index management -> index -> Mappings in Kibana) : { "mappings": { "_doc": { …

I may be wrong, but I guess Kibana is parsing the _source and showing it. And even after refreshing it shows that warning as it has no mapping for it. So it's stored in _source, but not mapped and not searchable.

Understand "enable: false" mapping setting

Elastic Stack Elasticsearch

Travis April 14, 2021, 8:34am 7

Ok I will do that. Thank you @warkolm !

1 Like

Topic		Replies	Views
Enabled = false, still indexing everything in kibana Elasticsearch	2	777	March 19, 2019
Enabled = False on objects still able to search Elasticsearch	2	1016	July 5, 2017
After "_source" : { "enabled" : false } , I am not able to see data in discover tab? Kibana	6	1084	July 6, 2017
Elastic search how to ignore a field in mapping Elasticsearch	4	9117	July 5, 2017
KIBANA:This field is present in your elasticsearch mapping but not in any documents in the search results. You may still be able to visualize or search on it Kibana	3	12123	July 6, 2017

Understand "enable: false" mapping setting

Related topics