Indexmapping @timestamp fails

(Morten Bjoernsvik) #1

Usually my @timestamp index looks like:
"@timestamp": {
"type": "date",
"format": "yyyy-MM-dd HH:mm:ss.SSS"

But I find indexes where it looks like this:
"@timestamp": {
"type": "text",
"fields": {
"keyword": {
"type": "keyword",
"ignore_above": 256

Resulting in index pattern conflict. All data is inserted via the _bulk api

Is this because data is inserted before index has been created or has the first line error?.
How to prevent this?