elasticsearch
elasticsearch copied to clipboard
Published
20 hours ago •
elastic
elastic
Set `subobjects: false` by default when `index.mode` is `logs`
Description
As described in this issue when it comes to logs ingestion we would like to limit the chances that logs are rejected. One such reason to reject log documents is because of conflicts in mapping objects as scalar or objects. Using subobject: false we can prevent such kind of conflicts and, as a result, we need to use this setting as the default for logging use case. Users would still be able to set it to true if required, anyway.
Later on, once the index.mode setting is applied to all logs-*-* index patterns this will, in turn, become the default for all logging datastreams.
