I create a custom template.json in filebeat folder, and configured it to template.path in filebeat.yml.
The template contains a field of local_timestamp which is a date field in my logs.
"format": "yyyy-MM-dd HH:mm:ss||dd-MMM-yyyy HH:mm:ss.SSS"
And I set up the ingest node on my elasticsearch server, and add a grok processor to extract the date from my log message to a name of local_timestamp.
But I could only see the field of local_timestamp is type of text in kibana and elasticsearch's mapping API response.
What should I do to set the field datatype to date, Did I must to set the mapping through API rather filebeat's template?