Hi,
If i copy fields and rename them to match ECS you have a duplicate of data, are these 2 fields deduplicated as part of the compression within the doc?
Looking at the wiki for
Thanks
Phil
Hi,
If i copy fields and rename them to match ECS you have a duplicate of data, are these 2 fields deduplicated as part of the compression within the doc?
Looking at the wiki for
Thanks
Phil
Hello Philip,
I don't know the answer to your question but you could use field aliases instead of duplicating the field: https://www.elastic.co/guide/en/elasticsearch/reference/master/alias.html
This way, the field is stored only once but can still be accessed in both ways.
Best regards
Wolfram
© 2020. All Rights Reserved - Elasticsearch
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.