Data type for filebeat data being ignored

Elastic Stack Beats
1

I have data coming in from kubernetes -> stdout -> filebeat -> logstash -> elastic. Looking at the data in Kibana I see that it doesn't have a recognized type. (IE it's marked with a '?' and can't be searched for a chart).

Doing a GET /filebeat-2019.01.22 I can see a mapping for the relevant fields:

"lagmonitor" : {
  "properties" : {
     "consumer" : {
        "properties" : {
           "group" : {
              "type" : "text",
              "fields" : {
                "keyword" : {
                   "type" : "keyword",
                   "ignore_above" : 256
                }
             }
           },
           "sum" : {
             "type" : "text",
             "fields" : {
                "keyword" : {
                  "type" : "keyword",
                  "ignore_above" : 256
            }
         }
      }

and so on.

My questions:

  • why isn't kibana showing the "consumer.group" type as text / keyword?
  • how do I change the "sum" field to be numeric?
2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.