Hello,
I'm a beginner at ElasticSearch. I'm having a big confusion.
I have got log lines, i parsed them via grok filter. the Date type in index was string.
I asked how to chage it to date. i was told to reindex it. i read the documentations below:
- https://www.elastic.co/guide/en/elasticsearch/reference/current/indices-put-mapping.html
- https://www.elastic.co/guide/en/elasticsearch/reference/current/date.html
I didn't get how exactly to manipulate the mapping ? shall i map every field and then parse logs via logstash's filter grok or what ?