We have an index with so many data form different application.
we are currently looking for a way like schema restriction and not allow people to generate new field.
Is there any way to use logstash to lookup on a list or sql data lookup, then remove all the other field not on the list.
We had look at prune plugin, but we have thousands field out there.
We cannot use logstash config to deal with thousands of field name
Let me know if you need more explain