How it Impacts Free-Text Searches
By default most log fields are not analyzed in Elasticsearch. The one exception is the 'message' field.
The 'message' field is analyzed and then tokenized (broken down) by whitespace, dashes, punctuation signs or other configuration changes made by Logz.io. The not analyzed fields do not apply any tokenizer at all so your search needs to match the value of the field exactly (unless you use Wildcard, Regex or Fuzzy), plus only not analyzed fields can be used to create Visualizations.
In our continuous efforts to enhance the usability of our platform, we’ve applied some changes to our tokenizer configurations to improve your free-text searching: