The problem I currently have in Kibana 3 is as follows…
When I search for @fields.Doctype Kibana 3 displays results as follows.
The values in the Doctype field are..
I am using the "KV" filter in Logstash to extract fields from the cs_uri_query and there may be new fields I cannot account for each day.
I have looked at the following.
What are the implications of not tokenising fields and how would I only tokenise some fields and exclude all other from being tokenised?
For example, if I do not tokenise the Doctype field, when I search for "Product" will it return nothing or both "Product Document" and "Product Idea"?
I am new to ES and LS so if there is a better way of getting to my end result then please suggest it
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to firstname.lastname@example.org.
For more options, visit https://groups.google.com/groups/opt_out.