We are in the process of centralizing all log files into Elasticsearch and I am on the frontier team trying to make some proofs of concept. What I cannot wrap my head around