Elasticsearch Metadata

By Opster Team

Updated: Mar 21, 2023

| 1 min read

Overview

Metadata in Elasticsearch refers to additional information stored for each document. This is achieved using the specific metadata fields available in Elasticsearch. The default behavior of some of these metadata fields can be customized during mapping creation.

Examples

Using _meta meta-field for storing application-specific information with the mapping:

PUT /my_index?pretty
{
  "mappings": {
    "_meta": { 
      "domain": "security",
      "release_information": {
        "date": "18-01-2020",
        "version": "7.5"
      }
    }
  }
}

Notes

  • In version 2.x, Elasticsearch had a total 13 meta fields available, which are: _index, _uid, _type, _id, _source, _size, _all, _field_names, _timestamp, _ttl, _parent, _routing, _meta
  • In version 5.x, _timestamp and _ttl meta fields were removed.
  • In version 6.x, the _parent meta field was removed.
  • In version 7.x, _uid and _all meta fields were removed.

How helpful was this guide?

We are sorry that this post was not useful for you!

Let us improve this post!

Tell us how we can improve this post?


Related log errors to this ES concept


Unable to resolve default zone from metadata server for GCE discovery service
Failed to get metadata for placement availability-zone
Error updating template request was not acknowledged
Error deleting template request was not acknowledged
Templates were partially upgraded to version
Templates were upgraded successfully to version
Templates are still reported as out of date after the upgrade The template upgrade will be retried
Deleting index
Skipping unknown custom object with type
Removing template
Adding template for index patterns
Completed closing of indices

< Page: 1 of 15 >