Hi I have changed only one place in my log config file, by adding one field into the prune's whitelist.
Then, the logstash parses super slowly, 10X roughly. Also, the added variable does not show properly in Kibana: no cached mapping for this field.
My question is if I change the config file like this, is this the normal reaction? If so, should I rename it to a new index pattern?
PS: i also tried put mapping for this new field, but it doesn't allow me, Error is exceed 1000 field limit for each index.