I want to use on elasticsearch for saving access log datas from WEB APP or Database Web app logs and Database logs have difference fields respectively. for example, was-access log : "url" : xxx, "session-id" : xxx, "status-code" : xxx, ... db-access log : "query" : xxx ... So, i thought 2…

What is the best way to index of documents when aggregating logs?

warkolm (Mark Walkom) August 19, 2017, 9:13pm 2

If they are different formats, then different indices is the best option.

Topic		Replies	Views
Trying to understand "indexes" and fields to store logs Elasticsearch	3	395	June 21, 2019
Best practise for index creation Elasticsearch	15	4978	December 25, 2017
What is better - create several document types or several indices? Elasticsearch	4	399	July 6, 2017
Best practices for indexing log data Logstash	6	20489	October 25, 2017
Best practice for indexing a daily log Logstash	2	1855	March 4, 2018