Hi folks,
we've been used ELK for a while, there is a thing that I am not understood well.
what is the difference between events in metricbeat and docs in ES index?
Are they the same in terms of expression?
it's better if anyone can explain it in detail.
Thanks in advance