动态场弹性搜索的问题

problem with dynamic field elastic search

我在我的服务器中 运行 Packet-beat。

我在索引映射中禁用了动态字段。这意味着如果新数据来了。不要创建新字段。

在我的映射中没有额外的字段,但是当我从邮递员发送请求以获取显示记录时。我的结果中有一个新字段,但我确定它不在我的映射中。

怎么可能?

我正在寻找答案。

elasticsearch 时设置 dynamic:false 其意思是:

The dynamic setting controls whether new fields can be added dynamically or not. It accepts three settings:

true : Newly detected fields are added to the mapping. (default)

false : Newly detected fields are ignored. These fields will not be indexed so will not be searchable but will still appear in the _source field of returned hits. These fields will not be added to the mapping, new fields must be added explicitly.

strict : If new fields are detected, an exception is thrown and the document is rejected. New fields must be explicitly added to the mapping.

在此link

中添加额外说明