Anyone using elasticsearch create a custom template for all bro logs and all fields. I’m using dynamic templates right now and it works fine but I’d like to have a bit more control over things and I’d rather not reinvent the wheel if its been done before.
My google-fu has returned minimal results and none are for all possible bro logs with all possible fields