Hi All. I'm new to the ELK stack, and am hoping I'm not trying to re-invent the wheel. Steep learning curve at the moment and am just after some help and guidance really. I'm using FileBeat to send logs out from our Kubernetes cluster. I was originally outputting the logs directly into elasticsear…

If filebeat is adding fields you do not want then you may be able to disable the processors that are adding them. If there are specific top-level fields you want to remove then a prune filter may help. If you blacklist a top-level object ([agent] for example) then all of the fields within it will a…

Help with reducing mapping

Elastic Stack Kibana

DavidoffX January 31, 2021, 7:33pm 9

Turned out this was me not understanding how elasticsearch actually works.

Link here for reference -> Dynamic mapping setting not honoured

Topic		Replies	Views
Part of the indices are created with this name "%{[kubernetes][namespace]}" Logstash	4	1299	April 15, 2021
Separate indexes for each kubernetes namespace Logstash	10	9311	April 1, 2019
Filebeat trouble with separate indexes per namespace Beats filebeat	1	1173	November 17, 2021
Elasticsearch filebeat index name Beats filebeat	2	402	May 15, 2018
Noob index management - naming / cleanup Logstash	8	873	October 10, 2018

Help with reducing mapping

Related topics