Data not being recognized of specific type


(Sohen Rane) #1

Hi,

I ingested data using LogStash with its configuration and a template, but it seems like the data is not mapping to the data type specified in the template.

LogStash's configuration:

LogStash's template:

Data:

Data Type (on "Discover" screen in "Kibana"):
DataType

When I run this, I get the result similar to the contents of the LogStash template image:
GET _template/testing_template

I have added a custom Grok pattern:
FIRSTPIPEOCCURRENCE [^\|]*

Please let me know if anything else.

Regards


(Christian Dahlqvist) #2

The problem with posting images of text is that it is impossible to search and copy/paste from it. It can also be very difficult to read, so please avoid doing this.

As far as I can see, it looks like the template field ("testing_template") does not match your index name ("testing_index"), which means the index template will not be applied. Look at the initial example in the documentation for how this field could be set using wildcards.


(Sohen Rane) #3

I apologize for the inconvenience.

I ingested the data again and got it working.


(system) #4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.