Index template settings disappear

Elastic Stack Kibana
4

I'll play tiebreaker here...

  1. If you're using an integration which it looks like you are you should follow @leandrojmp suggestion.
    Put in your settings in the @custom template is the correct thing to do as it allow for upgrades in the integration package without overriding your settings

  2. If you're not using an integration and you want to create your own data stream then you should follow what @Rafa_Silva is suggesting. By the way I would argue you would just clone the base logs template and follow the same pattern. I gave an example of this here

It seems for your current case I would go with option 1.

1 Like