A null value cannot be indexed or searched. When a field is set to null,
(or an empty array or an array of null values) it is treated as though that
field has no values.
The null_value parameter allows you to replace explicit null values with
the specified value so that it can be indexed and searched. For instance:
PUT my_index
{
"mappings": {
"properties": {
"status_code": {
"type": "keyword",
"null_value": "NULL"
}
}
}
}
PUT my_index/_doc/1
{
"status_code": null
}
PUT my_index/_doc/2
{
"status_code": []
}
GET my_index/_search
{
"query": {
"term": {
"status_code": "NULL"
}
}
}
Replace explicit | |
An empty array does not contain an explicit | |
A query for |
The null_value needs to be the same datatype as the field. For
instance, a long field cannot have a string null_value.
The null_value only influences how data is indexed, it doesn’t modify
the _source document.