This approach is reasonable?

I am making APM solution and want to use Elastic as a data source. And I use the dashboard as a Kibana. I am making collecting agent for gathering all information in java web applicaton. I will send big messages to the elastic and left the key of the data in advance. Because the target application monitored doesn't have to have until I assemble all information and it will give better performance. I will assemble the data for the Kibana with the key. I want to set the value not to be indexed and know how to assemble data with key.

Thanks for reading.

I am not sure I follow sorry.

But you should be attaching your application key with each message, this is a lot easier than trying to attach it once the data is in ES.