I'm hoping someone can help me get this straight in my head. I've setup elastic stack all on one server and everything works well as it is. I've been messing with the beats in my lab (Winlogbeat, Packetbeat, Metricbeat etc..) and sometimes I get templates that seem to be named wrong..
and when that happens all the built in sample dashboards for that beat seem to break... after some struggle and restarting elasticsearch I get an appropriate template named something like this:
and everything starts to work again. So, my question is.. what's configured wrong ?? I've checked the config files on the nodes and none of them have the "setup.template.settings" deleted in all my .yml files.. do I need to set
setup.template.enabled to false explicitly?