Hi All,
I was wondering if it is possible to filter out some fields from landing
indexer only (Elasticsearch) from Metron side. Either in enrichment or
indexing topology. I want to store all the parsed/enriched fields in HDFS,
but I want to filter some of them for Elasticsearch. Cleary, we can deal
with this scenario by changing Elasticsearch template to filter out useless
fields, but it is not very tuned because if we don't want to index/store
those fields in Elasticsearch why to bother to send it from the first place.