The JSON logs created by the cloud and orchestration services are typically very unique. If JSON file indexing is a new analysis opportunity for your team, or if new types of JSON files are being added into your existing indexing process, it can be helpful to test the JSON files and ChaosSearch indexing options to determine which options yield the best results for your files and analytics users.
Start with a subset of representative JSON data (perhaps a few hours of JSON data) and use the ChaosSearch Storage and Refinery features to create object groups with different flattening options so that you can assess storage choices and differences. Similarly, you can create test index views to try different JSON transformations to find the right level of filtering and visualization in the analytics phase.
Updated 4 months ago