Hi there,
A few days ago I decided to try the fileBeat, but it was a disaster due to the default option that loads the new templates overwriting the current templates. either way.
The problem is:
-
I have the ES with the template called XYZ (%{+yyyy.MM.dd}) that always has worked 100%. But, after trying the fileBeat their loaded some internals templates and after that the next days has a kind of mix between the old and fileBeat templates.
-
Question: Have some way to reindex the data e.g: 2017.01.26 with my previous template discarding those fileBeat new fields?
ps: I am using ES 5.5