Hi All,
I made upgrade of ELK 7.1.1 to ELK 7.0. I upgraded also one of 10 metrcibeat from 7.1.1 to 7.2.
upgraded host disappear from build in visualize Top Hosts By CPU (Realtime) [Metricbeat System] ECS.
I fouind that it is caused in group by section in By field. There was host.name and it works for all 7.1.1 and now upgraded server have field host.name.keyword. How to solve this?
default output in metrixbeat is logstash. logstash is configured by ths way:
hosts => ["192.168.5.5:9200"]
manage_template => false
index => "%{[@metadata][beat]}-%{[@metadata][version]}-%{+YYYY.MM.dd}"
Thanks
Jan