Hello, does concatenate_sources only concat field in the source option and concatenate_all_fields concat all the fields from the input, e.g.: i have a log with a,b,c,d,e fields.
If i use this,
fingerprint{
concatenate_sources => "true"
method => "MURMUR3_128"
source => ["a","b"]
target => "fingerprint"
}
the fingerprint will use the concat of a and b only. But if I use this
fingerprint{
concatenate_all_fields => "true"
method => "MURMUR3_128"
source => ["a","b"]
target => "fingerprint"
}
the fingerprint will use the concat of a, b, c, d, and e?