Filebeat, Mapper Plugin & Adding _size to all new logs

Elasticsearch 6.8.2
Filebeat 6.8.2

I try to add _size field to all our documents to analyze statistics
I deploy elk-stack in docker with mapper pluging and want to write to-do list for steps, required for migrate our Prod cluster.

I enable _size field directly to index

PUT /_template/filebeat-6.8.2-2019.08.28
{
"index_patterns": [
"filebeat-6.8.2-*"
],
"mappings": {
"doc": {
"_size": {
"enabled": true
}
}
}
}

but no results.
I reexport logs with filebeat, but not found _size filed in new logs.

Can you help me?
We need enable _size for all new logs

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.