Hi, I try to install & configure elk 8.3.3 without security on the docker "host" and filebeat on another docker. All works, i have the live logs, i imported my dashboards, but i have this: [image] and the problem is because all of my logs are in field.keyword and not field. [image] I checked …

@JLeysens @Dreinale Actually if you are using modules + logstash + datastreams + 8.x the output is a little different our docs are wrong and there is a tiny bug Please look at this thread [image] Only write ops with an op_type of create are allowed in data streams"}}}} Beats …

Discuss the Elastic Stack

Data allways stack in field.keyword than field

Elastic Stack Kibana

JLeysens (Jean-Louis Leysens) August 12, 2022, 9:45am 4

Are you using a module that requires a pipeline to be applied?

In the first comment I shared the logstash configuration takes this into consideration

Topic		Replies	Views
Index problem .keyword Kibana docker	9	900	August 3, 2022
Field was not found Elasticsearch docker	11	1549	September 7, 2022
Packetbeat template Beats packetbeat	4	813	July 3, 2017
Kibana not using sub keyword field for sorting Kibana	3	1469	December 22, 2016
Kibana Unknown Field Type Kibana	2	10597	November 6, 2019

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Data allways stack in field.keyword than field

Related topics