On Mon, Nov 17, 2014 at 1:48 AM, shadyxu <email@example.com> wrote:
Hi everyone,I am now using Flume to collect log into ElasticSearch. And the logs are in json format. However, when I check them in ES, it seems that Flume has put the entire json log in the @message attribute. Is there any config to do or need I do some coding to separate them into different columns as ES always does?BTW, I found that ttl seems not working in ElasticSearch. I'm using Flume 126.96.36.199.Any clue shall be appreciated.