Forgot to load new beats index template after upgrading Elastic Stack. Now I have double the number of fields

Elastic Stack Elasticsearch
1

As the title goes, I wasn't aware that I was supposed to load in the "new" index template each time I upgrade the Elastic Stack. A normal amount of fields for winlogbeat in my environment was around 300-400 fields.

Now that I've upgraded from 6.4.0 to 6.5.2 I now have nearly 700 fields, which seems (as far as I can tell) a bit much.

Is there anything I can do besides deleting the index template, reloading the new one in, and then reindexing? Or is this the correct process?

Thank you for your time.

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.