I have string like "DMZ-trust", when I search in elastic it shows result for DMZ and trust but not for complete word "DMZ-trust". Which property defines this behavior in elastic and how to change it.
I am using this mapping and query:
{
"mappings": {
"policy_rule": {
"properties": {
"display_name": {
"index": "analyzed",
"type": "text",
"fields": {
"_lowercase": {
"type": "text",
"analyzer": "case_insensitive"
},
"_raw": {
"index": "not_analyzed",
"type": "keyword"
}
}
}
}}}
Query:
{"query":{"bool":{"must":[{"multi_match":{"query":"DMZ-trust","fields":["display_name"],"type":"cross_fields","operator":"or"}}]}}}