I think the fact that the transform is not working correctly is linked to this question the training course labs -
Lab 5.3: Scaling Elasticsearch contains the instruction
"Using the Reindex API, reindex the documents from web_traffic into temp1 where user_agent.os.name.keyword equals "Android" (which will be 69,630 documents). "
The user_agent.os.name.keyword field does not appear in the mappings for the web_traffic index supplied in ## Lab 4.1: Changing Data.
Should i go back and restructure web_traffic to include user_agent.os.name.keyword perhaps using the user_agent processor? Or have I just missed something in the lab instructions. Up to this point information about building lab has supplied in full but unless I'm missing something in the instructions this step seems to require troubleshooting and configuration that's not specified. I'm wondering if that's the way the labs work or I've just not followed the steps.