We have a number of indexs for devices with limited static fields, ie a firewall. (assuming an upgrade of the device does not add more fields)
I typically use the ECS as the template for the indexs. Would there be any performance gains to JVM usage if i created my own templates with the required fields?
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.