Jakub Sokołowski dd218622e3
logs.nimbus: specify json.msg as default query field
This avoids errors like this:
```
failed to create query: field expansion matches too many fields, limit: 1024, got: 1046
```
Which is caused by default being a wildcard, that causes querying of
available fields, which in case of Nimbus logs is more than 1024.

This could be fixed by increasing `max_clasue_count`, but a cleaner
solution is simply limiting queries without a field specified to `json.msg`.

https://www.elastic.co/guide/en/elasticsearch/reference/7.17/index-modules.html#dynamic-index-settings
https://www.elastic.co/guide/en/kibana/7.17/upgrade-assistant-api-default-field.html

Signed-off-by: Jakub Sokołowski <jakub@status.im>
2024-09-25 14:33:00 +02:00
..
2024-09-25 14:12:48 +02:00
2024-08-06 16:02:55 +05:30
2024-09-25 14:12:48 +02:00
2024-07-05 11:44:09 +02:00