I get a log message when elasticsearch starts that document_type is in use and is depreciated, etc. etc. I've read the docs on it and didn't think I was even using it since I started with 6.3.0 - but I still get the notice. I've grep'd all my ES/LS files for _type and I can't find it anywhere. I do have 2 references to @metadata like this.
filter {
fingerprint {
...
target => "[@metadata][fingerprint]"
}
}
that doesn't seem like that'd be the document_type though? maybe?