Hi All. I'm new to the ELK stack, and am hoping I'm not trying to re-invent the wheel. Steep learning curve at the moment and am just after some help and guidance really. I'm using FileBeat to send logs out from our Kubernetes cluster. I was originally outputting the logs directly into elasticsear…

If filebeat is adding fields you do not want then you may be able to disable the processors that are adding them. If there are specific top-level fields you want to remove then a prune filter may help. If you blacklist a top-level object ([agent] for example) then all of the fields within it will a…

Help with reducing mapping

Elastic Stack Kibana

DavidoffX January 31, 2021, 7:33pm 9

Turned out this was me not understanding how elasticsearch actually works.

Link here for reference -> Dynamic mapping setting not honoured

Topic		Replies	Views
Part of the indices are created with this name "%{[kubernetes][namespace]}" Logstash	4	1293	April 15, 2021
Separate indexes for each kubernetes namespace Logstash	10	9283	April 1, 2019
Filebeat trouble with separate indexes per namespace Beats filebeat	1	1169	November 17, 2021
Unable to get namespace as index name Logstash	1	521	January 9, 2020
Can't specify custom index name in Filebeat Beats filebeat	4	861	November 20, 2019

Help with reducing mapping

Related Topics