Elasticsearch best practice: disable dynamic mapping in your indices, or even reject unmapped fields.