How I can change source for index winlogbeat

[Serhiy_H_V]

Hi.

All index for winlogbeat looks like

with no data.
But logstash and auditbeat looks well with source and all fields data.

I Try to remove and recreate winlogbeat index but it's not work.
than I thy to remove winlogbeat pattern not wonrk too.

[Serhiy_H_V]

I use this.

PUT /_template/winlogbeat*
{
"index_patterns" : ["winlogbeat-*"],
"order" : 1,
"settings" : {
"number_of_shards" : 2
},
"mappings" : {
"type1" : {
"_source" : { "enabled" : true }
}
}
}
than
recreate pattent winlogbeat.
thanks.