The results in our Discovery tab have by default highlights of the "message" word.
In my opinion it is caused by specifying default_field settings for our logstash indexes
{
"template": "logstash-*",
"settings": {
"index": {
"query": {
"default_field": "message"
}
}
},
"mappings": {
Is somebody else also using different default_field than all and facing same behaviour?
Well, I am rather not sure if this is bug or feature?
tbragin
(Tanya Bragin)
February 19, 2016, 2:29pm
2
May be related to this?
Query is looking in message field, but results highlights matches in other fields:
Maybe require_field_match: true would help?
:Discovery
:Highlight
PR sent
bug
the search bar is absolutely empty in our case
but I definitely see the similarity in over-highlighting things (-:
dandrestor
(Dan Nestor)
December 15, 2016, 8:03am
4
Nope, looks unrelated.
I posted Highlighting wrong when index.query.default_field is set in the Elasticsearch forum where hopefully this will get looked at by the right people.
//Dan