Allen Chan
Allen Chan
Any progress on this request? The format listed by @seuf is exactly how i want my documents to look like
As a workaround i had to add this to all my logstash indexers to normalize the messages. ``` mutate { add_field => { "host" => "%{message}" } remove_field => [...
Any progress on this? I assume skipping the lookup entirely for IPs not in maxmind db would add performance gains.
Do we have idea when this can be merged?