Do I need to convert fields in logstash if I have a index template in elastic?

Elastic Stack Logstash
1

Hi, I've been converting some fields in logstash, but I was wondering if I really need to do this if I have a index template with those fields already created in elastic

      mutate {
        convert => {
                "value" => "float"
                "hostid" => "integer"
                }
        }

in index template:

      },
      "value": {
        "type": "float"
      },
      "hostid": {
        "type": "long"
      },
2

I do not believe you do. elasticsearch will attempt to parse the field according to the template.

1 Like
3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.