Change kubernetes.event.message to text #13964
Merged
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This one fixes #13575.
With this PR, full text search will be possible on
kubernetes.event.message
field.Currently full text search was possible but on
message
field of ECS which was a result ofcopy_to
introduced on #10284. With this change, highlighting of the results also takes place, sth that was not happening before.How to test it
event
to monitor a Kubernetes cluster.kubectl run prod-server --image=nginx --namespace=staging