Tags now indexed as they should be used for stack monitoring

Chris Wiechmann · Chris Wiechmann · commit 4907b9ef7ae2 · 2021-01-20T18:40:55.000+01:00
diff --git a/apibuilder4elastic/elasticsearch_config/traffic-summary/index_template.json b/apibuilder4elastic/elasticsearch_config/traffic-summary/index_template.json
@@ -24,6 +24,10 @@
                 "type": "keyword",
                 "doc_values": false
             },
+            "tags": {
+                "type": "text",
+                "norms": false
+            },
             "processInfo.serviceId": {
                 "type": "keyword"
             },
diff --git a/logstash/pipelines/OpenTrafficPipeline.conf b/logstash/pipelines/OpenTrafficPipeline.conf
@@ -14,7 +14,7 @@ filter {
       match => [ "timestamp", "UNIX_MS" ]
   }
   mutate {
-    remove_field => ["agent", "ecs", "log", "host", "timestamp", "tags", "logType", "event" ]
+    remove_field => ["agent", "ecs", "log", "host", "timestamp", "logType", "event" ]
   }
   # Take the given gatewayName (provided by filebeat) and replace the serviceName with that value 
   mutate {

Original file line number	Diff line number	Diff line change
`@@ -14,7 +14,7 @@ filter {`
`14`	`14`	`match => [ "timestamp", "UNIX_MS" ]`
`15`	`15`	`}`
`16`	`16`	`mutate {`
`17`		`- remove_field => ["agent", "ecs", "log", "host", "timestamp", "tags", "logType", "event" ]`
	`17`	`+ remove_field => ["agent", "ecs", "log", "host", "timestamp", "logType", "event" ]`
`18`	`18`	`}`
`19`	`19`	`# Take the given gatewayName (provided by filebeat) and replace the serviceName with that value`
`20`	`20`	`mutate {`