I am trying to change the default indexing pattern for logstash's netflow module. Currently fields netflow.dst_port and netflow.src_port are set to be string!
I have been changing the json files (netflow.json) in this directory:
And then erasing all data from elasticsearch and restarting everything. However, Kibana still shows that the field is a string.
Am I editing the right files?