I added a new mapping for some fields I want as numbers. I restared logstash and I see logstash properly groking the logs but when I look at kibana I only see
@timestamp
_id
_index
_score
_type
Under the management section , I see all the inder the logtash* index al the available fields, including the fields I had before, set to number/integer.
Anybody have any idea what happened. I need some direction.
Am i suppose to add all fields from the log into the new template I created because I only added the fields I needed to specify as number. But nothing is showing up except what I listed above.
--- MAPPING
{
"logstash": {
"order": 0,
"template": "logstash*",
"settings": {
"index": {
"number_of_shards": "5"
}
},
"mappings": {
"app_log": {
"_source": {
"enabled": true
},
"properties": {
"rs": {
"type": "integer"
},
"time_field": {
"type": "text"
},
"pt": {
"type": "integer"
},
"scores": {
"type": "integer"
},
"time": {
"type": "integer"
},
"net": {
"type": "integer"
},
"iot": {
"type": "integer"
}
}
}
},
"aliases": {}
}
}
thanks,
Alex