Hi All,
I was wondering if it is possible to filter out some fields from landing indexer only (Elasticsearch) from Metron side. Either in enrichment or indexing topology. I want to store all the parsed/enriched fields in HDFS, but I want to filter some of them for Elasticsearch. Cleary, we can deal with this scenario by changing Elasticsearch template to filter out useless fields, but it is not very tuned because if we don't want to index/store those fields in Elasticsearch why to bother to send it from the first place. Cheers, Ali