title: Why query DSL select doc which not include field?
body: <p>Dears,</p>
  <p>I need your advice/explanation.</p>
  <p>This is my query which select document from index which not include field f1.rc. I don't understand why.
  What is wrong in below query? Any idea?</p>
  <p>In my opinion this query should select documents that meet both conditions f1.rc and f1.mti. I'm confused.</p>
  <pre><code>GET /index-2022.04.14/_search?size=100&amp;pretty=true
  {
    &quot;query&quot;: {
      &quot;bool&quot;: {
        &quot;must&quot;: [
          {
           &quot;match&quot;: {
             &quot;f1.iface.keyword&quot;:&quot;MOSS&quot;
           }
          },
          {
            &quot;query_string&quot;: {
              &quot;query&quot;:  &quot;(server01\\.domain\\.com) OR (server02\\.comain\\.com)&quot;,
              &quot;default_field&quot;: &quot;agent.hostname&quot;,
              &quot;default_operator&quot;: &quot;AND&quot;
            }
          },
          {
            &quot;term&quot;: {
              &quot;log.file.path.keyword&quot;: {
                &quot;value&quot;: &quot;/apps/myapp1/log/cssf1.log&quot;
              }
            }
          },
          {
          &quot;query_string&quot;: {
            &quot;query&quot;: &quot;(f1.rc:/[0]\\d{2}/ and f1.mti:/\\[1][12][13579]\\d/) &quot;
           }
          },
          {
            &quot;range&quot;: {&quot;@timestamp&quot;: {&quot;gt&quot;: &quot;2022-04-14T15:08:50&quot;,&quot;lte&quot;: &quot;2022-04-14T15:08:51&quot;}}
          }
        ]
      }
    }
    }
  }
  </code></pre>
  <p>Best Regards,
  Dan</p>