Especially when feeding log data via logstash, I have never used store:true and have found no need to specify it at all. The logstash JSON will be stored as the _source and retrieved by the query so there is no need to use store at all.
Anyway, that's my experience. Brian -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/46a13fd5-5469-4aab-accd-60a33b27a096%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
