diff --git a/schemas/event.yml b/schemas/event.yml index 8ff113254..8a12ec568 100644 --- a/schemas/event.yml +++ b/schemas/event.yml @@ -590,7 +590,9 @@ Raw text message of entire event. Used to demonstrate log integrity. This field is not indexed and doc_values are disabled. It cannot be - searched, but it can be retrieved from `_source`. + searched, but it can be retrieved from `_source`. If users wish to + override this and index this field, consider using the wildcard + data type. index: false doc_values: false