Devon Sams
Results
2
comments of
Devon Sams
I just swapped the two. My mapping looks like: ``` "mapping": { "timestamp": "@timestamp", "display_timestamp": "@timestamp", "hostname": "kubernetes.container_name", "program": "kubernetes.host", "message": "log" } ```
@jasongaare What do you think about this?