You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
: Do not index any field containing a string with more characters than this value. This is important because {{es}}
74
-
will reject entire documents if they contain keyword fields that exceed `32766`bytes when UTF-8 encoded.
74
+
will reject entire documents if they contain keyword fields that exceed `32766` UTF-8 encoded bytes.
75
75
76
76
To avoid any risk of document rejection, set this value to `8191` or less. Fields with strings exceeding this
77
77
length will be excluded from indexing.
78
78
79
79
The defaults are complicated:
80
-
* Standard indices: `2147483647` (effectively unbounded). Documents containing `keyword` fields longer than `32766`
81
-
bytes will be rejected.
82
-
* `logsdb` indices: `8191`. `keyword` fields longer than `8191` characters won't be indexed, but the documents are
83
-
accepted and the values unindexed values are available from `_source.
84
-
* The [dynamic mapping](docs-content://manage-data/data-store/mapping/dynamic-mapping.md) for string fields
85
-
defaults to a `text` field with a [sub](/reference/elasticsearch/mapping-reference/multi-fields.md)-`keyword`
86
-
field with an `ignore_above` of `256`. String fields longer than 256 characters are available for full text
87
-
search but won't have a value in their `.keyword` sub-field they can not do exact matching over _search.
80
+
81
+
| Index type | Default | Effect |
82
+
| ---------- | ------- | ------ |
83
+
| Standard indices | `2147483647` (effectively unbounded) | Documents will be rejected if this keyword exceeds `32766` UTF-8 encoded bytes. |
84
+
| `logsdb` indices | `8191` | This `keyword` field will never cause documents to be rejected. If this field is longer than `8191` characters it won't be indexed and it's values are available from `_source`. |
85
+
| [dynamic mapping](docs-content://manage-data/data-store/mapping/dynamic-mapping.md) for string fields | `text` field with a [sub](/reference/elasticsearch/mapping-reference/multi-fields.md)-`keyword` field with an `ignore_above` of `256` | All string fields are availale. Values longer than 256 characters are only available for full text search and won't have a value in their `.keyword` sub-field they can not do exact matching over _search. |
: Should the field be quickly searchable? Accepts `true` (default) and `false`. `keyword` fields that only have [`doc_values`](/reference/elasticsearch/mapping-reference/doc-values.md) enabled can still be queried, albeit slower.
0 commit comments