Simply removing the message field is fine, I would prefer this (csv plugin) method as it's syntax may be more self-explanatory to the reader than splitting the message manually.
Simply removing the message field is fine, I would prefer this (csv plugin) method as it's syntax may be more self-explanatory to the reader than splitting the message manually.
© 2020. All Rights Reserved - Elasticsearch
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.