{"action":"closed","issue":{"url":"https://api.github.com/repos/elastic/kibana/issues/4679","labels_url":"https://api.github.com/repos/elastic/kibana/issues/4679/labels{/name}","comments_url":"https://api.github.com/repos/elastic/kibana/issues/4679/comments","events_url":"https://api.github.com/repos/elastic/kibana/issues/4679/events","html_url":"https://github.com/elastic/kibana/issues/4679","id":101197738,"number":4679,"title":"Nested fields with identical key names can not be queried with kibana search text input","user":{"login":"jeffsteinmetz","id":5488059,"avatar_url":"https://avatars.githubusercontent.com/u/5488059?v=3","gravatar_id":"","url":"https://api.github.com/users/jeffsteinmetz","html_url":"https://github.com/jeffsteinmetz","followers_url":"https://api.github.com/users/jeffsteinmetz/followers","following_url":"https://api.github.com/users/jeffsteinmetz/following{/other_user}","gists_url":"https://api.github.com/users/jeffsteinmetz/gists{/gist_id}","starred_url":"https://api.github.com/users/jeffsteinmetz/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jeffsteinmetz/subscriptions","organizations_url":"https://api.github.com/users/jeffsteinmetz/orgs","repos_url":"https://api.github.com/users/jeffsteinmetz/repos","events_url":"https://api.github.com/users/jeffsteinmetz/events{/privacy}","received_events_url":"https://api.github.com/users/jeffsteinmetz/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/elastic/kibana/labels/needs%20details","name":"needs details","color":"cc317c"},{"url":"https://api.github.com/repos/elastic/kibana/labels/not%20reproducible","name":"not reproducible","color":"c7def8"}],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":11,"created_at":"2015-08-15T18:34:44Z","updated_at":"2015-08-17T15:50:43Z","closed_at":"2015-08-17T15:50:43Z","body":"This appears to be specific to documents that have nested object keys with a similar field name.  It doesn't matter if you send in a mapping.\r\nRegular elastic search queries (such as term, bool+must work fine).  Only exhibited in kibana search (which I believe uses filters).\r\n\r\nTo reproduce, index a single document as follows (no mapping required), then try to search `user.id:\"84ba51f5-4939-4639-a15f-9cb9d793fea2\"` after setting the kibana time frame to 1 year or similar to catch time range based on this timestamp.\r\n\r\n```\r\nPOST /test17/user/84ba51f5-4939-4639-a15f-9cb9d793fea2\r\n{\r\n \"timestamp\" : \"2015-08-14T00:00:00Z\",\r\n  \"user\" : {\r\n      \"id\": \"84ba51f5-4939-4639-a15f-9cb9d793fea2\",\r\n      \"foo\" : {\r\n        \"id\" : \"1234\"\r\n      }\r\n   }\r\n}\r\n```\r\n\r\nThe above document will not return from a kibana search of `user.id:\"84ba51f5-4939-4639-a15f-9cb9d793fea2\"`\r\n\r\nIf you **delete the index**, and start over by sending this document instead the  `user.id:\"84ba51f5-4939-4639-a15f-9cb9d793fea2\"` search will work. (note key name \"id\" replaced with key name \"bar\")\r\n\r\n\r\n```\r\nDELETE /test17\r\n\r\nPOST /test17/user/84ba51f5-4939-4639-a15f-9cb9d793fea2\r\n{\r\n \"timestamp\" : \"2015-08-14T00:00:00Z\",\r\n  \"user\" : {\r\n      \"id\": \"84ba51f5-4939-4639-a15f-9cb9d793fea2\",\r\n      \"foo\" : {\r\n        \"bar\" : \"1234\"\r\n      }\r\n   }\r\n}\r\n```"}}