I am using Filebeat 5.3-->Logstash 5.3-->Elasticserach 5.3.
While sending my documents using filebeat I am using document_type to tag a log file type as below
- input_type: log
This document_type goes into elastic search as filed "type".
This filed "type" is searchable but analyzed. If I try to use the query in Kibana as "type : jboss-server-logs " it gives me all different logs files which have "jboss-server-logs", "jboss","logs" and each component broken.
I wanted to use this filed to particularly see at different log files I am pushing into one index.
How can i get rid of this filed being analyzed and make it a raw field?