Use _source['service'] instead. Much slower but doesn't need to the field
indexed.
On Nov 10, 2014 1:01 AM, "ramky" <panguluri.ramakris...@gmail.com> wrote:
> Thanks Nikolas.
> I tried the query but it failed to search on non-indexed field.
>
> Query i used is
> {
> "filter": {
> "script": {
> "script": "doc['service'].value == http"
> }
> }
> }
> "service" is non-indexed field.
>
> Exception after execution is
> {[x3a9BIGLRwOdhwpsaUZbrw][siem0511][0]:
> QueryPhaseExecutionException[[siem0511][0]:
> query[ConstantScore(cache(_type:siem))],from[0],size[10]: Query Failed
> [Failed to execute main query]]; nested: CompileException[[Error: No field
> found for [service] in mapping with types [siem]]\n[Near : {...
> doc['service'].value == http ....}]\n ^\n[Line: 1, Column: 1]];
> nested: ElasticsearchIllegalArgumentException[No field found for [service]
> in mapping with types [siem]]; }
>
> Please help.
>
> Thanks in advance.
>
> Regards
> Ramky
>
>
>
>
> On Friday, November 7, 2014 5:49:04 PM UTC+5:30, Nikolas Everett wrote:
>>
>> The first example on http://www.elasticsearch.org/guide/en/elasticsearch/
>> reference/current/query-dsl-script-filter.html#query-dsl-script-filter
>> should just if you replace > with .equals
>>
>> On Fri, Nov 7, 2014 at 2:11 AM, ramky <panguluri....@gmail.com> wrote:
>>
>>> Thanks Nikolas Everett for your quick reply.
>>>
>>> Can you please provide me example to execute the same. I tried multiple
>>> times but unable to execute.
>>>
>>> Thanks in advance
>>>
>>> On Thursday, November 6, 2014 9:44:55 PM UTC+5:30, Nikolas Everett wrote:
>>>>
>>>> You can totally use a script filter checking the field against
>>>> _source. Its super duper duper slow but you can do it if you need it
>>>> rarely.
>>>>
>>>> On Thu, Nov 6, 2014 at 11:13 AM, Ivan Brusic <iv...@brusic.com> wrote:
>>>>
>>>>> You cannot search/filter on a non-indexed field.
>>>>>
>>>>> --
>>>>> Ivan
>>>>>
>>>>> On Wed, Nov 5, 2014 at 11:45 PM, ramakrishna panguluri <
>>>>> panguluri....@gmail.com> wrote:
>>>>>
>>>>>> I have 10 fields inserted into elasticsearch out of which 5 fields
>>>>>> are indexed.
>>>>>> Is it possible to search on non indexed field?
>>>>>>
>>>>>> Thanks in advance.
>>>>>>
>>>>>>
>>>>>> Regards
>>>>>> Rama Krishna P
>>>>>>
>>>>>> --
>>>>>> You received this message because you are subscribed to the Google
>>>>>> Groups "elasticsearch" group.
>>>>>> To unsubscribe from this group and stop receiving emails from it,
>>>>>> send an email to elasticsearc...@googlegroups.com.
>>>>>> To view this discussion on the web visit https://groups.google.com/d/
>>>>>> msgid/elasticsearch/c63ac6bb-8717-470e-a5e4-01a8bd75b769%40goo
>>>>>> glegroups.com
>>>>>> <https://groups.google.com/d/msgid/elasticsearch/c63ac6bb-8717-470e-a5e4-01a8bd75b769%40googlegroups.com?utm_medium=email&utm_source=footer>
>>>>>> .
>>>>>> For more options, visit https://groups.google.com/d/optout.
>>>>>>
>>>>>
>>>>> --
>>>>> You received this message because you are subscribed to the Google
>>>>> Groups "elasticsearch" group.
>>>>> To unsubscribe from this group and stop receiving emails from it, send
>>>>> an email to elasticsearc...@googlegroups.com.
>>>>> To view this discussion on the web visit https://groups.google.com/d/
>>>>> msgid/elasticsearch/CALY%3DcQDD0JYJeX%2BCmV%3DGACekwofjUYFQvoS
>>>>> WQ86Th3r-MBWZtw%40mail.gmail.com
>>>>> <https://groups.google.com/d/msgid/elasticsearch/CALY%3DcQDD0JYJeX%2BCmV%3DGACekwofjUYFQvoSWQ86Th3r-MBWZtw%40mail.gmail.com?utm_medium=email&utm_source=footer>
>>>>> .
>>>>>
>>>>> For more options, visit https://groups.google.com/d/optout.
>>>>>
>>>>
>>>> --
>>> You received this message because you are subscribed to the Google
>>> Groups "elasticsearch" group.
>>> To unsubscribe from this group and stop receiving emails from it, send
>>> an email to elasticsearc...@googlegroups.com.
>>> To view this discussion on the web visit https://groups.google.com/d/
>>> msgid/elasticsearch/4d3e5636-1124-4dcb-b6be-b62f893cae39%
>>> 40googlegroups.com
>>> <https://groups.google.com/d/msgid/elasticsearch/4d3e5636-1124-4dcb-b6be-b62f893cae39%40googlegroups.com?utm_medium=email&utm_source=footer>
>>> .
>>>
>>> For more options, visit https://groups.google.com/d/optout.
>>>
>>
>> --
> You received this message because you are subscribed to the Google Groups
> "elasticsearch" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to elasticsearch+unsubscr...@googlegroups.com.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/elasticsearch/725d437c-988d-4462-98db-dc281c7e438c%40googlegroups.com
> <https://groups.google.com/d/msgid/elasticsearch/725d437c-988d-4462-98db-dc281c7e438c%40googlegroups.com?utm_medium=email&utm_source=footer>
> .
> For more options, visit https://groups.google.com/d/optout.
>
--
You received this message because you are subscribed to the Google Groups
"elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to elasticsearch+unsubscr...@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/elasticsearch/CAPmjWd1Yp%2BY%3Dm%2BRhrJMMCBFdJ_Vg57PH8fP9_WE3neWB6cjH%3DA%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.
