Adding a field (via logstash) to a monthly index with a template

I understand that the template is applied at index creation, and I was wandering what will happen if I add a field via logstash in the middle of the month?

the added field will be usable for agregations and searches?

just will not have the mapping?

The template is applied to the mapping of the index at creation.

If the field is mentioned in the template then the mapping will be applied when the first document containing the field is indexed.

1 Like

sorry Badger inglish is not my native language and some things I dont understand.

the answer to this question is no?

Answer is Yes.
Added fields will be usable for aggregations and searches. yes.

1 Like

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.