I wanted to know what has to be done in following situation:
Scenario: Considering Apache Logs. It has two types of logs with difference in it's fields as access.log and error.log. I wanted to ask if these logs should be included in one single index or separate index?
From memory, these won't have different field types even if they share names, so you should be ok to put them in the same index.
1 Like