How does one change (or disable) the text analyzer for certain fields at index time. I am injecting reasonably structured data and want to exclude most of my data from text analysis.
In particular the "_", "-" and the "." character in my object names wreaks havok when the analysis of this data. I want to analyze the data in kibana but because things like gwmon-01.groundworkopensource.com are getting tokenized into "gwmon" "01" "groundworkopensource" "com" I am not getting the behavior I want. As I look at the data I really only want the text analyzer active on the "textMessage" tag below. FWIW Im using the 1.05 Elasticsearch.PM for indexing and retrieval with plans to use Kibana in the near future. curl -XPUT 'http://localhost:9200/' -d "body" : [ { "index" : { "_index" : "groundwork-2014.03.06", "_id" : "755161", "_type" : "foundation_logmessage" } }, { "priority" : "Lowest Priority in a scale from 1 -10", "operationStatus" : "ACCEPTED", "lastInsertDate" : "2014-03-06T15:59:02.000-0800", "monitorStatus" : "WARNING", "appType" : "NAGIOS", "id" : "755161", "severity" : "WARNING", "@timestamp" : "2014-03-06T15:59:02.000-0800", "typeRule" : "UNDEFINED", "firstInsertDate" : "2014-03-06T15:59:02.000-0800", "origin" : "gwmon-01.groundworkopensource.com", "applicationSeverity" : "WARNING", "device" : "ps-70-esearch-connector-dev", "service" : "ssh_cpu_perl", "properties" : { "SubComponent" : "ps-70-esearch-connector-dev:ssh_cpu_perl", "ErrorType" : "SERVICE ALERT" }, "host" : "ps-70-esearch-connector-dev", "textMessage" : "WARNING - total %CPU for process perl : 28.5", "monitorServer" : "localhost", "component" : "WARNING", "msgCount" : 1, "reportDate" : "2014-03-06T15:59:03.531-0800" } ], "index" : "groundwork-2014.03.06", "type" : "foundation_logmessage" } curl -XGET 'http://localhost:9200/_search?q=_id:755161&pretty=true' { "took" : 1, "timed_out" : false, "_shards" : { "total" : 15, "successful" : 15, "failed" : 0 }, "hits" : { "total" : 1, "max_score" : 1.0, "hits" : [ { "_index" : "groundwork-2014.03.06", "_type" : "foundation_logmessage", "_id" : "755161", "_score" : 1.0, "_source" : { "priority":"Lowest Priority in a scale from 1 -10", "operationStatus":"ACCEPTED", "lastInsertDate":"2014-03-06T15:59:02.000-0800" ,"monitorStatus":"WARNING", "appType":"NAGIOS", "id":"755161", "severity":"WARNING", "@timestamp":"2014-03-06T15:59:02.000-0800", "typeRule":"UNDEFINED", "firstInsertDate":"2014-03-06T15:59:02.000-0800", "origin":"gwmon-01.groundworkopensource.com", "applicationSeverity":"WARNING", "device":"ps-70-esearch-connector-dev", "service":"ssh_cpu_perl", "properties":{"SubComponent":"ps-70-esearch-connector-dev:ssh_cpu_perl", "ErrorType":"SERVICE ALERT"},"host":"ps-70-esearch-connector-dev", "textMessage":"WARNING - total %CPU for process perl : 28.5", "monitorServer":"localhost", "component":"WARNING", "msgCount":1, "reportDate":"2014-03-06T15:59:03.531-0800" } } ] } } -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/00a794bf-26e8-429b-888b-ec053798d0f3%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
