Keyword or Analyzed text in logs


I use elastic kibana combo mainly to handle logs. Our logs are machine generated and hence it makes little sense to get the text like function names or operations name analyzed.

I am thinking of putting in a dynamic template where all the strings field get dynamically mapped to keyword type.
Before I do that I will like to know if there will be some performance gain to be had or is it simply not worth it. Also any unintended consequences of this.

(system) closed #2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.