Elasticsearch Mapping - Rename existing field

Question

Is there anyway I can rename an element in an existing elasticsearch mapping without having to add a new element ? If so whats the best way to do it in order to avoid breaking the existing mapping?

e.g. from fieldCamelcase to fieldCamelCase

{
    "myType": {
        "properties": {
            "timestamp": {
                "type": "date",
                "format": "date_optional_time"
            },
            "fieldCamelcase": {
                "type": "string",
                "index": "not_analyzed"
            },
            "field_test": {
                "type": "double"
            }
        }
    }
}

Unfortunately not, you can either create a new field or recreate your index — Val, Mar 30 '17 at 14:14

score 23 · Accepted Answer · answered Mar 31 '17 at 14:01

You could do this by creating an Ingest pipeline, that contains a Rename Processor in combination with the Reindex API.

PUT _ingest/pipeline/my_rename_pipeline
{
  "description" : "describe pipeline",
  "processors" : [
    {
      "rename": {
        "field": "fieldCamelcase",
        "target_field": "fieldCamelCase"
      }
    }
  ]
}

POST _reindex
{
  "source": {
    "index": "source"
  },
  "dest": {
    "index": "dest",
    "pipeline": "my_rename_pipeline"
  }
}

Note that you need to be running Elasticsearch 5.x in order to use ingest. If you're running < 5.x then you'll have to go with what @Val mentioned in his comment :)

What's the syntax for multiple field renaming? Array of objects? — uiTeam324, Oct 05 '20 at 08:14

Pramod H G · Answer 2 · 2021-09-17T05:39:34.630

Updating field name in ES (version>5, missing has been removed) using _update_by_query API:

Example:

POST http://localhost:9200/INDEX_NAME/_update_by_query
{
  "query": { 
    "bool": {
        "must_not": {
            "exists": {
                "field": "NEW_FIELD_NAME"
            }
        }
    }
  },
  "script" : {
    "inline": "ctx._source.NEW_FIELD_NAME = ctx._source.OLD_FIELD_NAME; ctx._source.remove(\"OLD_FIELD_NAME\");"
  }
}

score 7 · Answer 3 · answered Jul 24 '19 at 07:53

First of all, you must understand how elasticsearch and lucene store data, by immutable segments (you can read about easily on Internet).

So, any solution will remove/create documents and change mapping or create a new index so a new mapping as well.

The easiest way is to use the update by query API: https://www.elastic.co/guide/en/elasticsearch/reference/2.4/docs-update-by-query.html

POST /XXXX/_update_by_query

{
    "query": { 
    "missing": {
      "field": "fieldCamelCase"
    }
  },
    "script" : {
        "inline": "ctx._source.fieldCamelCase = ctx._source.fieldCamelcase; ctx._source.remove(\"fieldCamelcase\");"
    }
}

IBS · Answer 4 · 2020-11-23T18:30:25.707

2

Starting with ES 6.4 you can use "Field Aliases", which allow the functionality you're looking for with close to 0 work or resources.

Do note that aliases can only be used for searching - not for indexing new documents.

edited Nov 23 '20 at 18:30

answered Nov 23 '20 at 18:15

IBS

165
8

Elasticsearch Mapping - Rename existing field

4 Answers4

Linked