Pattern-based field masking disables the search

Security
1

OpenSearch v 1.3.0
I have a role with a Pattern-based field masking on a single term.
For example,

message::/Handle SUBSCRIBE message; name:.+-/::Handle SUBSCRIBE message; name:***-

As a user with that role:

  1. I can not use the masked field in search at all.
    When I use the following search query (DQL): ‘message:“Handle SUBSCRIBE”’
    I am receiving “No results match your search criteria”.
    The same is happening with any other query with that field (ex. ‘message:foo’)
  2. I can find the document by querying with other terms. In that scenario, the ‘message’ field is masked as expected.

I found no any explanation or documentation describing how field masking affects the queries on that fields. Is it designed to disable search on that fields?

2

Hi @LP_Paul Due to the way masking takes place, from a technical perspective - it may not be possible to support searches on the masked fields.

3

Hi @Anthony, thank you for the clarification.
2OS team: please add some limitation note to the documentation for field masking. I assume it’s important to know in advance.