Elasticsearch index template merge confuse

Elastic Stack Elasticsearch
1

I create a template "logstash-users":

{
"logstash-users": {
"order": 1,
"template": "logstash-users",
"settings": {
"index": {
"refresh_interval": "5s"
}
},
"mappings": {
"default": {
"dynamic_templates": [
{
"string_fields": {
"mapping": {
"fielddata": {
"format": "disabled"
},
"index": "not_analyzed",
"omit_norms": true,
"type": "string"
},
"match_mapping_type": "string",
"match": "*",
"fields": {
"raw": {
"ignore_above": 0
}
}
}
}
],
"_all": {
"enabled": false
}
}
},
"aliases": {}
}
}

I know when I create an indices "logstash-users", it will apply the template merged by "logstash-users" and "logstash".

I want to disable *.raw field in "logstash-users" template, but not work.

So how can I do to disable *.raw field in "logstash-users" template?

Thanks for any help.

2

Delete these lines:

"fields": {
  "raw": {
    "ignore_above": 0
  }
}