Filebeat - Update Index Template and create new index

Elastic Stack Beats
1

Hello,
I am new to Filebeat.

I used the standard configuration setup for filebeat and got it to ship data to Elasticsearch.
I have added some custom fields and they automatically got the "keyword" type.

I changed the type in the "filebeat" index template but I am not able to apply it to the Index created automatically during the filebeat setup.
What is the best way to update the index to reflect the changes in the template ?

2

Hi @Hardik_Sanghavi

you have to reindex the old index

Index templates are only applied during index creation. Changes to index templates do not affect existing indices. Settings and mappings specified in create index API requests override any settings or mappings specified in an index template.
3

Hello,
Thanks for the response.
Is there a way to do it from Web Interface and not use the console ?

4

Hi @Hardik_Sanghavi

you can use Dev tool.

1 Like
5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.