I'm new to elasticsearch, and when I create an index with a CSV filter, I see that all the string fields have been created as analyzed strings. I read in some websites that logstash creates .raw fields for all string fields, but I don't see these .raw fields in my index. How do I make sure that .raw fields are created for each string field?
Logstash's default index template only applies to indexes whose names begin with "logstash-". Either follow that naming convention or adjust the template to fit your needs.
Thanks Magnus. I think I’ll create a custom template with all the column names. Right now, the column names are generated dynamically.