Hi, I made a typo mistake in logstash and it caused a field with a wrong name (ts_duration). I've deleted the data from elasticsearch and now data is in correct field (duration).
I did some search and I've found out that I have to delete index pattern and recreate it so the empty field goes away. It will cause all my dashboards and visualizes useless.
Is there any simpler solution to delete this field ?
Thank you.
It shouldn't be necessary to recreate the index pattern, refreshing it using the reload button in the top right should be enough. Make sure no index matching the pattern has the duration field as part of its mapping first.
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.