Keyword or Analyzed text in logs


#1

I use elastic kibana combo mainly to handle logs. Our logs are machine generated and hence it makes little sense to get the text like function names or operations name analyzed.

I am thinking of putting in a dynamic template where all the strings field get dynamically mapped to keyword type.
Before I do that I will like to know if there will be some performance gain to be had or is it simply not worth it. Also any unintended consequences of this.