# Filbeat export template
**URL:** https://discuss.elastic.co/t/filbeat-export-template/155581
**Category:** Beats
**Tags:** filebeat
**Created:** [November 6, 2018, 4:11pm UTC](https://discuss.elastic.co/t/filbeat-export-template/155581 "2018-11-06T16:11:00Z")
**Posts on this page:** 5
**Page:** 1
### Author:  [@shauryagarg2006](https://discuss.elastic.co/u/shauryagarg2006)
#### Post date: [November 6, 2018, 4:11pm UTC](https://discuss.elastic.co/t/filbeat-export-template/155581/1 "2018-11-06T16:11:01Z")
I am using the version 6.4.2 of filebeat and elasticsearch. I am trying to upload the template into elasticsearch using the setup command. It works fine but when I saw the generated template (also through the filebeat export command) the fields under `key: log` are missing. The only generated mapping is:
```auto
"log": {
"properties": {
"level": {
"ignore_above": 1024,
"type": "keyword"
}
}
},
```
It is missing the other properties like message e.t.c.
And because of this when I am sending docker logs the log.message field is getting indexed as a keyword type where as it should be text.
---
### Author:  [@kvch](https://discuss.elastic.co/u/kvch)
#### Post date: [November 7, 2018, 7:20pm UTC](https://discuss.elastic.co/t/filbeat-export-template/155581/2 "2018-11-07T19:20:44Z")
Are you using a module? Do you have any special fields? Could you please share your configuration formatted using ``?
---
### Author:  [@shauryagarg2006](https://discuss.elastic.co/u/shauryagarg2006)
#### Post date: [November 7, 2018, 9:50pm UTC](https://discuss.elastic.co/t/filbeat-export-template/155581/3 "2018-11-07T21:50:01Z")
I have not changed the configuration. It is what is supplied when you install the filebeat.
I just installed using `sudo apt-get install metricbeat=6.4.2` after which I ran the `sudo filebeat export template`
The generated output has many fields under keys like logstash, mongodb etc but under logs its the same as what I posted.
---
### Author:  [@kvch](https://discuss.elastic.co/u/kvch)
#### Post date: [November 8, 2018, 2:49pm UTC](https://discuss.elastic.co/t/filbeat-export-template/155581/4 "2018-11-08T14:49:39Z")
Filebeat does not provide a field named `log.message`. Where does that field come from?
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [December 6, 2018, 2:49pm UTC](https://discuss.elastic.co/t/filbeat-export-template/155581/5 "2018-12-06T14:49:41Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.