Use non-wildcard field for text (#18066)

elastic · Apr 29, 2020 · cde17b1 · cde17b1
1 parent 81dfe61
commit cde17b1
Show file tree

Hide file tree

Showing 3 changed files with 7 additions and 5 deletions.
diff --git a/heartbeat/docs/fields.asciidoc b/heartbeat/docs/fields.asciidoc
@@ -7915,7 +7915,7 @@ example: DigiCert SHA2 High Assurance Server CA
 *`tls.server.x509.issuer.common_name.text`*::
 +
 --
-type: wildcard
+type: text
 
 --
 
@@ -8033,7 +8033,7 @@ example: r2.shared.global.fastly.net
 *`tls.server.x509.subject.subject.common_name.text`*::
 +
 --
-type: wildcard
+type: text
 
 --
 

diff --git a/heartbeat/include/fields.go b/heartbeat/include/fields.go
diff --git a/heartbeat/monitors/active/dialchain/_meta/fields.yml b/heartbeat/monitors/active/dialchain/_meta/fields.yml
@@ -80,7 +80,8 @@
                   default_field: false
                   multi_fields:
                     - name: text
-                      type: wildcard
+                      type: text
+                      analyzer: simple
                 - name: distinguished_name
                   type: keyword
                   ignore_above: 1024
@@ -147,7 +148,8 @@
                   default_field: false
                   multi_fields:
                     - name: text
-                      type: wildcard
+                      type: text
+                      analyzer: simple
                 - name: subject.distinguished_name
                   type: keyword
                   ignore_above: 1024