Usually my @timestamp index looks like:
"@timestamp": {
"type": "date",
"format": "yyyy-MM-dd HH:mm:ss.SSS"
},
But I find indexes where it looks like this:
"@timestamp": {
"type": "text",
"fields": {
"keyword": {
"type": "keyword",
"ignore_above": 256
}
}
},
Resulting in index pattern conflict. All data is inserted via the _bulk api
Is this because data is inserted before index has been created or has the first line error?.
How to prevent this?
Thanks