I am attempting to break out the various params into individual datapoints. I.e:


should populate two seperate parameters, simplrAccountId and smbName. How would I go about making this change to the schema?

Hi David,

What is your ultimate goal? To be able to search transactions by simplrAccountId and smbName?

We don't create searchable fields for each query item because those query strings aren't necessarily within your control. If we we were to make searchable fields for them, then a malicious user could craft a query string that creates strain on your Elasticsearch.

In the next release, the APM Server will have support for sending data to Logstash. You could set up a pipeline to transform the events, pulling out the specific fields you care about.


That makes perfect sense, thanks Andrew!

This topic was automatically closed 20 days after the last reply. New replies are no longer allowed.