对于日志场景，字段里面中英文混合，应该使用中文分词器吗？效率如何？

{

  "query": {

    "match": {

      "message": "密码错误"

    }

  }

}

GET {index}/_analyze?text="密码错误"

{

  "tokens": [

    {

      "token": "密",

      "start_offset": 1,

      "end_offset": 2,

      "type": "<IDEOGRAPHIC>",

      "position": 1

    },

    {

      "token": "码",

      "start_offset": 2,

      "end_offset": 3,

      "type": "<IDEOGRAPHIC>",

      "position": 2

    },

    {

      "token": "错",

      "start_offset": 3,

      "end_offset": 4,

      "type": "<IDEOGRAPHIC>",

      "position": 3

    },

    {

      "token": "误",

      "start_offset": 4,

      "end_offset": 5,

      "type": "<IDEOGRAPHIC>",

      "position": 4

    }

  ]

}

{

  "app_template": {

    "order": 0,

    "index_patterns": [

      "app_*"

    ],

    "settings": {

      "index": {

        "refresh_interval": "15s",

        "analysis": {

          "analyzer": {

            "message_analyzer": {

              "pattern": """=|,|_|\.|\s|-|\[|\]|\*|\|""",

              "tokenizer": "pattern"

            }

          }

        },

        "number_of_shards": "4",

        "number_of_replicas": "1"

      }

    },

    "mappings": {

      "doc": {

        "properties": {

          "message": {

            "type": "text",

            "analyzer": "message_analyzer"

          }

        }

      }

    },

    "aliases": {}

  }

}