File tree Expand file tree Collapse file tree 1 file changed +2
-2
lines changed Expand file tree Collapse file tree 1 file changed +2
-2
lines changed Original file line number Diff line number Diff line change @@ -54,15 +54,15 @@ Default Elasticsearch convention:
5454[float]
5555===== ECS convention for indexing text fields
5656
57- ECS flips the convention around.
57+ ECS flips the above convention around.
5858
5959For monitoring use cases, `keyword` indexing is needed almost exclusively, with
6060full text search needed on very few fields.
6161Moreover, indexing for full text search on lots of fields, where it's not expected
6262to be used is wasteful of resources.
6363
6464Given these two premises, ECS defaults
65- all text indexing to `keyword` at the top level (with very few exceptions).
65+ all text indexing to `keyword` datatype (with very few exceptions).
6666Any use case that requires full text search indexing on additional fields
6767can add a {ref}/multi-fields.html[multi-field]
6868for full text search. Doing so does not conflict with ECS,
You can’t perform that action at this time.
0 commit comments