First thing, I do have a Grok configuration file which is working just fine in parsing my log files. I even have it writing to a separate file for any non matches.
My issue is that when looking at the created index for logstash-* it only ever contains the following fields (_id, _index, _score, _source and _type)
How do I add fields to this through the config file?
What I have in my config file, which I thought would do the trick is...
add_field => ["fieldOne", "valueOne",
What am I doing wrong here?