I'm currently using ElasticSearch to index some mail data with attachments.
My question is how to add fields like "From", "To","Cc" of the e-mail, to the index of the ingest plugin?
Currently it look like this:
{
"description" : "Extract attachment information",
"processors" : [
{
"attachment" : {
"field" : "data",
}
}
]
}