Sometimes we save XML dumps into app logs.
They can be 10kb-100kb long and we are not interested in indexing full content.
Is it possible to limit indexing to only first 1kb on text?
We are only interesting in "_source" to read original content for long documents.
https://www.elastic.co/guide/en/elasticsearch/reference/master/ignore-above.html is not accepted in my ES 5.6 pattern mapping. Docs description is confusing (looks like field is comletely ignored instead of partially covered by index).