When setting up the basic beats system, there are default templates given in the package named as ___beat.template.json or ___beat.template-es6x.json (which apparently seem to be identical) (fill ___ with one of the beat's name). When I look at them, all of them end with a "template" parameter:
"template": "___beat-*"
When I search them, they just appear as one of the top-level field of the template (url obfuscated for confidentiality):
curl https://id:pw@some.elasticsearch.com:ppppp/_template?pretty=true
{
...
"filebeat_test": {
"order": 0,
"template": "filebeat-*",
...
}
}
I'd like to know what this "template" field is used for, since it neither defines the name of the template nor seems to work as an index.