Unexpected highlighted words matching with value of index.query.default_field

The results in our Discovery tab have by default highlights of the "message" word.

In my opinion it is caused by specifying default_field settings for our logstash indexes

  "template": "logstash-*",
  "settings": {
    "index": {
      "query": {
        "default_field": "message"
  "mappings": {

Is somebody else also using different default_field than all and facing same behaviour?

Well, I am rather not sure if this is bug or feature?

May be related to this?

the search bar is absolutely empty in our case

but I definitely see the similarity in over-highlighting things (-:

Nope, looks unrelated.

I posted Highlighting wrong when index.query.default_field is set in the Elasticsearch forum where hopefully this will get looked at by the right people.