Hi, I try to install & configure elk 8.3.3 without security on the docker "host" and filebeat on another docker. All works, i have the live logs, i imported my dashboards, but i have this: [image] and the problem is because all of my logs are in field.keyword and not field. [image] I checked …

@JLeysens @Dreinale Actually if you are using modules + logstash + datastreams + 8.x the output is a little different our docs are wrong and there is a tiny bug Please look at this thread [image] Only write ops with an op_type of create are allowed in data streams"}}}} Beats …

Data allways stack in field.keyword than field

Elastic Stack Kibana

JLeysens (Jean-Louis Leysens) August 12, 2022, 9:25am 2

Hello @Dreinale !

Are you able to follow the setup instructions and getting filebeat -> ES -> Kibana working?

Per this comment: Index problem .keyword - #5 by stephenb

Topic		Replies	Views
Index problem .keyword Kibana docker	9	891	August 3, 2022
Field was not found Elasticsearch docker	11	1512	September 7, 2022
Kibana not using sub keyword field for sorting Kibana	3	1469	December 22, 2016
Kibana Unknown Field Type Kibana	2	10517	November 6, 2019
Field type changed results in a conflict - kibana reports an error Kibana	3	425	February 21, 2023

Data allways stack in field.keyword than field

Related Topics