# Data not being recognized of specific type

**URL:** https://discuss.elastic.co/t/data-not-being-recognized-of-specific-type/113965
**Category:** Logstash
**Created:** [January 3, 2018, 5:26pm UTC](https://discuss.elastic.co/t/data-not-being-recognized-of-specific-type/113965 "2018-01-03T17:26:39Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![sohenrane](https://avatars.discourse-cdn.com/v4/letter/s/d07c76/32.png) [@sohenrane](https://discuss.elastic.co/u/sohenrane)
#### Post date: [January 3, 2018, 5:26pm UTC](https://discuss.elastic.co/t/data-not-being-recognized-of-specific-type/113965/1 "2018-01-03T17:26:39Z")

</div>

Hi,

I ingested data using LogStash with its configuration and a template, but it seems like the data is not mapping to the data type specified in the template.

LogStash's configuration:

 ![Testing_configuration](https://us1.discourse-cdn.com/elastic/original/3X/4/d/4da203c04adb58048c562558ee2d9ece40513400.png)

LogStash's template:

 ![Testing_settings](https://us1.discourse-cdn.com/elastic/original/3X/8/f/8f1b844ccbf89cd5f4004a8d2aaf962dc17ad4f0.png)

Data:

 ![Data](https://us1.discourse-cdn.com/elastic/original/3X/9/5/95419c7d9afb90a82dd4c7dfcacfed144fec5637.PNG)

Data Type (on "Discover" screen in "Kibana"):  
 ![DataType](https://us1.discourse-cdn.com/elastic/original/3X/f/1/f11d924d8c87f774935f9ba79ca4d20ca5f7c708.PNG)

When I run this, I get the result similar to the contents of the LogStash template image:  
**GET \_template/_testing\_template_**

I have added a custom Grok pattern:  
**_FIRSTPIPEOCCURRENCE [^\|]\*_**

Please let me know if anything else.

Regards

---

<div class="post-metadata">

### Author: ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)
#### Post date: [January 3, 2018, 7:44pm UTC](https://discuss.elastic.co/t/data-not-being-recognized-of-specific-type/113965/2 "2018-01-03T19:44:03Z")

</div>

The problem with posting images of text is that it is impossible to search and copy/paste from it. It can also be very difficult to read, so please avoid doing this.

As far as I can see, it looks like the `template` field (`"testing_template"`) does not match your index name (`"testing_index"`), which means the index template will not be applied. Look at the initial example in [the documentation](https://www.elastic.co/guide/en/elasticsearch/reference/6.1/indices-templates.html) for how this field could be set using wildcards.

---

<div class="post-metadata">

### Author: ![sohenrane](https://avatars.discourse-cdn.com/v4/letter/s/d07c76/32.png) [@sohenrane](https://discuss.elastic.co/u/sohenrane)
#### Post date: [January 3, 2018, 9:34pm UTC](https://discuss.elastic.co/t/data-not-being-recognized-of-specific-type/113965/3 "2018-01-03T21:34:27Z")

</div>

I apologize for the inconvenience.

I ingested the data again and got it working.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [January 31, 2018, 9:34pm UTC](https://discuss.elastic.co/t/data-not-being-recognized-of-specific-type/113965/4 "2018-01-31T21:34:34Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.