The results in our Discovery tab have by default highlights of the "message" word.
In my opinion it is caused by specifying default_field settings for our logstash indexes
{
"template": "logstash-*",
"settings": {
"index": {
"query": {
"default_field": "message"
}
}
},
"mappings": {
Is somebody else also using different default_field than all and facing same behaviour?
Well, I am rather not sure if this is bug or feature?