# Elasticsearch Index Mapping issues

**URL:** <https://discuss.elastic.co/t/elasticsearch-index-mapping-issues/152096>\
**Category:** Elasticsearch\
**Created:** [October 11, 2018, 4:30pm UTC](https://discuss.elastic.co/t/elasticsearch-index-mapping-issues/152096 "2018-10-11T16:30:10Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![motts](https://avatars.discourse-cdn.com/v4/letter/m/839c29/32.png) [@motts](https://discuss.elastic.co/u/motts)\
**Post date:** [October 11, 2018, 4:30pm UTC](https://discuss.elastic.co/t/elasticsearch-index-mapping-issues/152096/1 "2018-10-11T16:30:10Z")

</div>

Hello,

I am on ES 2.4. I am having issues with my mapping it seems. If i go into Kibana and set my index pattern name, I do not see any ".raw" fields. However, if I change my index pattern to just "\*", then I get to see the .raw fields I expect to see in my index, so it must be an issue with how I create the mapping.

Here is what I do

```
curl -XPUT 'localhost:9200/_template/firewall?pretty' -H 'Content-Type: application/json' -d'
{
 "template": "firewall-*",
  "settings": {
    "number_of_shards": 1
  },
  "mappings": {
    "type1": {
      "_source": {
        "enabled": true
      },
      "properties": {
        "host_name": {
          "type": "string",
          "index": "not_analyzed"
        },
        "created_at": {
          "type": "date",
          "format": "EEE MMM dd HH:mm:ss Z YYYY"
        }
      }
    }
  }
}
'

```

Please give me some assistance.

thanks

---

<div class="post-metadata">

**Author:** ![motts](https://avatars.discourse-cdn.com/v4/letter/m/839c29/32.png) [@motts](https://discuss.elastic.co/u/motts)\
**Post date:** [October 11, 2018, 9:08pm UTC](https://discuss.elastic.co/t/elasticsearch-index-mapping-issues/152096/2 "2018-10-11T21:08:15Z")

</div>

Basically, I just want something simple to apply to all the indices. The default mapping works fine, but it seems to only apply to logstash-\* indices. I am not sure if there is a way to change that to apply to everything and then I don't have to do this step.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 8, 2018, 9:08pm UTC](https://discuss.elastic.co/t/elasticsearch-index-mapping-issues/152096/3 "2018-11-08T21:08:15Z")

</div>

Closed on November 8, 2018, 9:08pm UTC

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.