elasticsearch - 动态场 Elasticsearch 的问题

Question

我在我的服务器上运行 Packet-beat。

我在索引映射中禁用了动态字段。这意味着如果有新数据到来。不要创建新字段。

在我的映射中没有额外的字段，但是当我从 postman 发送请求以获取显示记录时。我的结果中有一个新字段，但我确定它不在我的映射中。

怎么可能？

Answer 1

我正在寻找答案。

在 elasticsearch当设置 dynamic:false它的意思是:

The dynamic setting controls whether new fields can be added dynamically or not. It accepts three settings:

true : Newly detected fields are added to the mapping. (default)

false : Newly detected fields are ignored. These fields will not be indexed so will not be searchable but will still appear in the _source field of returned hits. These fields will not be added to the mapping, new fields must be added explicitly.

strict : If new fields are detected, an exception is thrown and the document is rejected. New fields must be explicitly added to the mapping.

link 中的额外说明