Considering this example content of the ``processor_notes`` field: 

``sp-processor04_phx1_mozilla_com.6544:2012; LegacyCrashProcessor; exploitability tool failed: 127``

The standard analyzer of elasticsearch (which is the default one when nothing is set) will give this result: 

``[ "sp", "processor04_phx1_mozilla_com", "6544", "2012", "legacycrashprocessor", "exploitability", "tool", "failed", "127" ]``

Which means that all those terms are searchable. Does that seems good to you? I have tested with the other default analyzers that elasticsearch provides, and they don't return better results.