According to the documentation, the _all field is useful if you want to search without knowing exactly which field to search on.
The idea of the _all field is that it includes the text of one or more other fields within the document indexed. It can come very handy especially for search requests, where we want to execute a search query against the content of a document, without knowing which fields to search on.
Under what circumstances would you want to turn this off?
The reason I ask, is I am using ELK for logging and I'm having performance problems, and an apache solr expert recommended that I turn '_all' off. I want to understand before I make any changes.