{"action":"created","issue":{"url":"https://api.github.com/repos/juttle/juttle-elastic-adapter/issues/25","labels_url":"https://api.github.com/repos/juttle/juttle-elastic-adapter/issues/25/labels{/name}","comments_url":"https://api.github.com/repos/juttle/juttle-elastic-adapter/issues/25/comments","events_url":"https://api.github.com/repos/juttle/juttle-elastic-adapter/issues/25/events","html_url":"https://github.com/juttle/juttle-elastic-adapter/issues/25","id":123959756,"number":25,"title":"\"logstash schema\"","user":{"login":"henridf","id":1022041,"avatar_url":"https://avatars.githubusercontent.com/u/1022041?v=3","gravatar_id":"","url":"https://api.github.com/users/henridf","html_url":"https://github.com/henridf","followers_url":"https://api.github.com/users/henridf/followers","following_url":"https://api.github.com/users/henridf/following{/other_user}","gists_url":"https://api.github.com/users/henridf/gists{/gist_id}","starred_url":"https://api.github.com/users/henridf/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/henridf/subscriptions","organizations_url":"https://api.github.com/users/henridf/orgs","repos_url":"https://api.github.com/users/henridf/repos","events_url":"https://api.github.com/users/henridf/events{/privacy}","received_events_url":"https://api.github.com/users/henridf/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/juttle/juttle-elastic-adapter/labels/assigned","name":"assigned","color":"008000"},{"url":"https://api.github.com/repos/juttle/juttle-elastic-adapter/labels/question","name":"question","color":"cc317c"}],"state":"open","locked":false,"assignee":{"login":"dmehra","id":5817365,"avatar_url":"https://avatars.githubusercontent.com/u/5817365?v=3","gravatar_id":"","url":"https://api.github.com/users/dmehra","html_url":"https://github.com/dmehra","followers_url":"https://api.github.com/users/dmehra/followers","following_url":"https://api.github.com/users/dmehra/following{/other_user}","gists_url":"https://api.github.com/users/dmehra/gists{/gist_id}","starred_url":"https://api.github.com/users/dmehra/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dmehra/subscriptions","organizations_url":"https://api.github.com/users/dmehra/orgs","repos_url":"https://api.github.com/users/dmehra/repos","events_url":"https://api.github.com/users/dmehra/events{/privacy}","received_events_url":"https://api.github.com/users/dmehra/received_events","type":"User","site_admin":false},"milestone":null,"comments":2,"created_at":"2015-12-27T04:36:46Z","updated_at":"2015-12-27T06:03:25Z","closed_at":null,"body":"What is the \"logstash schema\"? More specifically, what are the requirements for an ES \"schema\" to be juttle-readable?\r\n\r\nI have a set of events that I'm storing in ES. I'd be interested to use Juttle on it, but I don't know how I need to structure the documents in order for this adapter to be able to use them. "},"comment":{"url":"https://api.github.com/repos/juttle/juttle-elastic-adapter/issues/comments/167385782","html_url":"https://github.com/juttle/juttle-elastic-adapter/issues/25#issuecomment-167385782","issue_url":"https://api.github.com/repos/juttle/juttle-elastic-adapter/issues/25","id":167385782,"user":{"login":"henridf","id":1022041,"avatar_url":"https://avatars.githubusercontent.com/u/1022041?v=3","gravatar_id":"","url":"https://api.github.com/users/henridf","html_url":"https://github.com/henridf","followers_url":"https://api.github.com/users/henridf/followers","following_url":"https://api.github.com/users/henridf/following{/other_user}","gists_url":"https://api.github.com/users/henridf/gists{/gist_id}","starred_url":"https://api.github.com/users/henridf/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/henridf/subscriptions","organizations_url":"https://api.github.com/users/henridf/orgs","repos_url":"https://api.github.com/users/henridf/repos","events_url":"https://api.github.com/users/henridf/events{/privacy}","received_events_url":"https://api.github.com/users/henridf/received_events","type":"User","site_admin":false},"created_at":"2015-12-27T06:03:25Z","updated_at":"2015-12-27T06:03:25Z","body":"Thanks @dmehra. Actually the reason for my question is that I'm not ingesting this data using logstash. \r\n\r\nI was hoping to still be able to use this adapter to pull events out of my ES but it sounds the adapter is currently hard-wired to logstash. \r\n\r\nIf/when you decide to make it more flexible, Kibana might be a good starting model: it had no issue figuring out my mapping and querying my data. \r\n"}}