Elasticsearch 6.8.2
Filebeat 6.8.2
I try to add _size field to all our documents to analyze statistics
I deploy elk-stack in docker with mapper pluging and want to write to-do list for steps, required for migrate our Prod cluster.
I enable _size field directly to index
PUT /_template/filebeat-6.8.2-2019.08.28
{
"index_patterns": [
"filebeat-6.8.2-*"
],
"mappings": {
"doc": {
"_size": {
"enabled": true
}
}
}
}
but no results.
I reexport logs with filebeat, but not found _size filed in new logs.
Can you help me?
We need enable _size for all new logs