环境：filebeat-6.6.0 logstash-6.6.0 ES 6.5.4
场景：同一台服务器上采集多种日志，经fb-ls到es
参考：【踩坑】ELK6.0已取消filebeat配置document_type
我这里使用[fields][service]后提示如下，似乎该设置被忽略了：
[WARN ] 2019-03-05 10:42:32.995 [[main]>worker1] FieldReference - Detected ambiguous Field Reference `[fields[[service]`, which we expanded to the path `[fields, service]`; in a future release of Logstash, ambiguous Field References will not be expanded.
那么问题来了，6.6版本到底用document_type还是fields？在哪能找到相关信息么？谢谢！
场景：同一台服务器上采集多种日志，经fb-ls到es
参考：【踩坑】ELK6.0已取消filebeat配置document_type
我这里使用[fields][service]后提示如下，似乎该设置被忽略了：
[WARN ] 2019-03-05 10:42:32.995 [[main]>worker1] FieldReference - Detected ambiguous Field Reference `[fields[[service]`, which we expanded to the path `[fields, service]`; in a future release of Logstash, ambiguous Field References will not be expanded.
那么问题来了，6.6版本到底用document_type还是fields？在哪能找到相关信息么？谢谢！
0 个回复