I have read query-string-syntax official doc
some mapping detail
"ip":{
"type":"keyword"
},
"dest_ip":{
"type":"keyword",
"copy_to":"ip"
},
"src_ip":{
"type":"keyword",
"copy_to":"ip"
},
When I want to search as ip:10.118.0.15
,es nothing hits. But when use ip=10.118.0.15
I get the results I want.
- I want to know why.
- How to use the common syntax like
ip:10.118.0.15
to search ? Add some config?