Hi all,
A question about collection (or mapping, I'm an ES user).
I have a use-case where I index AWS CloudTrail logs. currently, in ES, I
use the CT eventName as document type for dynamic mapping.
There are several event types which use the same field name but with
different datatype.
Example: ev
wrote:
> On 5/25/2017 1:49 AM, Yarden Bar wrote:
> > A question about collection (or mapping, I'm an ES user).
> >
> > I have a use-case where I index AWS CloudTrail logs. currently, in ES, I
> > use the CT eventName as document type for dynamic mapping.
> >