Logsene, our hosted ELK stack now part of Sematext Cloud, exposes the Elasticsearch API. If you have experience with Elasticsearch though, if you’re aware of its rich ecosystem of tools, you know how valuable this is. When you send your logs to a Logsene app their structure (their mapping in Elasticsearch parlance) is automatically detected. Log event fields are created and their types are deduced from the received data. The mapping and the index template are also created. Under the hood, Logsene maintains a sequence of indices for each Logsene app. Every so often a new index is added and its mapping is based on the index template for that Logsene app.
For more details on this check out our blog post or see it for yourself.