When the enrich processor appends enrich data to an incoming document, it adds a `target_field` to contain the enrich data. This `target_field` contains both the `match_field` AND `enrich_fields` specified in the enrich policy. Previously, this was reflected in the documented example but not explicitly stated. This adds several explicit statements to the docs. |
||
---|---|---|
.. | ||
append.asciidoc | ||
bytes.asciidoc | ||
circle.asciidoc | ||
common-options.asciidoc | ||
convert.asciidoc | ||
date-index-name.asciidoc | ||
date.asciidoc | ||
dissect.asciidoc | ||
dot-expand.asciidoc | ||
drop.asciidoc | ||
enrich.asciidoc | ||
fail.asciidoc | ||
foreach.asciidoc | ||
geoip.asciidoc | ||
grok.asciidoc | ||
gsub.asciidoc | ||
html_strip.asciidoc | ||
join.asciidoc | ||
json.asciidoc | ||
kv.asciidoc | ||
lowercase.asciidoc | ||
pipeline.asciidoc | ||
remove.asciidoc | ||
rename.asciidoc | ||
script.asciidoc | ||
set-security-user.asciidoc | ||
set.asciidoc | ||
sort.asciidoc | ||
split.asciidoc | ||
trim.asciidoc | ||
uppercase.asciidoc | ||
url-decode.asciidoc | ||
user-agent.asciidoc |