How to update Index patterns?

[wajika]

I currently use Elastic stack 7.14. Recently, when I wanted to search for a certain field, I found that it couldn’t be searched. Kibana gave me a prompt "Unindexed fields can not be searched". I remember that index patterns can be updated on kibana Stack Management, but on kibana 7.14. I can’t find this button. How can I update index patterns from now on?

[warkolm (Mark Walkom)]

This is an automatic function now

[wajika]

If it is an automatic function, why do I still find "Unindexed fields can not be searched" on discover?

[warkolm (Mark Walkom)]

That's to do with the mapping of those fields I'd say. Can you share that?

[wajika]

I added an Ingest Node Pipelines to parse the json data of the original field, and then it’s a bit strange that there is no original field in the mapping, but it still exists in the apm template.

[
  {
    "json": {
      "field": "http.request.body.original",
      "target_field": "http.request.body.original_json",
      "ignore_failure": true
    }
  }
]

  "http": {
          "dynamic": "false",
          "properties": {
            "request": {
              "properties": {
                "body": {
                  "properties": {
                    "bytes": {
                      "type": "long"
                    },
                    "content": {
                      "type": "keyword",
                      "ignore_above": 1024,
                      "fields": {
                        "text": {
                          "type": "text",
                          "norms": false
                        }
                      }
                    }
                  }
                },
                "bytes": {
                  "type": "long"
                },
                "headers": {
                  "type": "object",
                  "enabled": false
                },
                "id": {
                  "type": "keyword",
                  "ignore_above": 1024
                },
                "method": {
                  "type": "keyword",
                  "ignore_above": 1024
                },
                "mime_type": {
                  "type": "keyword",
                  "ignore_above": 1024
                },
                "referrer": {
                  "type": "keyword",
                  "ignore_above": 1024
                }
              }
            }

apm-7.14.0 template

    "http": {
      "dynamic": false,
      "type": "object",
      "properties": {
        "request": {
          "type": "object",
          "properties": {
            "headers": {
              "type": "object",
              "enabled": false
            },
            "referrer": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "method": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "mime_type": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "bytes": {
              "type": "long"
            },
            "id": {
              "ignore_above": 1024,
              "type": "keyword"
            },
            "body": {
              "type": "object",
              "properties": {
                "original": {
                  "type": "object"
                },
                "bytes": {
                  "type": "long"
                },
                "content": {
                  "ignore_above": 1024,
                  "type": "keyword",
                  "fields": {
                    "text": {
                      "norms": false,
                      "type": "text"
                    }
                  }
                }
              }
            }
          }
        }