Closed kienmarkdo closed 5 months ago
Correction: the _id
object's are fine and are addressed only to ensure data uniqueness (if the same object is inserted into ELK, a new row is not created).
Do index mapping of IDs from long
to keyword
for faster searching.
IDs (Channel ID, User ID, Message ID etc.) are currently being stored as
int
objects in Elasticsearch.These IDs should be stored as
id
objects in Elasticsearch.Create an index mapping of these IDs prior to inserting the collected data into Elasticsearch.