create query on subfield (field contained in another field) using elasticsearch-dsl-py?

Question

similar to question I want to create a query on a sub field (which is not of type nested)

if data is in format

"fs": {
    "used": 1000,
    "mount_point": "/"
 }

as mentioned in answer by aaronfay I tried querying with

search.query('match', **{"fs.used": 0})

and it works as expected.

But for field named mount_point, the query returns empty response.

search.query('match', **{"fs.mount_point": "/"})

even if i have data which has mount_point = '/'. why?

Honza Král · Accepted Answer · 2017-02-24 09:19:59Z

1

What is your mappings for the mount_point field? You need that field to be of type keyword which means without any analyzer. By default it would be text which means it would be split into words and / is not a word so it would get dropped.

answered Feb 24, 2017 at 9:19

Honza Král

3,03217 silver badges11 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

Siddhesh Suthar Over a year ago

thanks for the response. Its the default mapping of topbeat index created by logstash. mount_point field's mapping is of type string ` "fs" : { ... "mount_point" : { "type" : "string" }, "used" : { "type" : "long" }, ... } }, ` so should i change the mapping of this field to keyword

Siddhesh Suthar Over a year ago

solved temporarily by comparing with another field (which doesn't have only '/' in value. ` .query('match', **{"fs.device_name": "/dev/sda4"} `

Collectives™ on Stack Overflow

create query on subfield (field contained in another field) using elasticsearch-dsl-py?

1 Answer 1

2 Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

2 Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related