# Logstash reffdering to old index for the mapping

**URL:** <https://discuss.elastic.co/t/logstash-reffdering-to-old-index-for-the-mapping/120079>\
**Category:** Logstash\
**Created:** [February 15, 2018, 9:53pm UTC](https://discuss.elastic.co/t/logstash-reffdering-to-old-index-for-the-mapping/120079 "2018-02-15T21:53:49Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![nsiva1](https://avatars.discourse-cdn.com/v4/letter/n/eada6e/32.png) [@nsiva1](https://discuss.elastic.co/u/nsiva1)\
**Post date:** [February 15, 2018, 9:53pm UTC](https://discuss.elastic.co/t/logstash-reffdering-to-old-index-for-the-mapping/120079/1 "2018-02-15T21:53:49Z")

</div>

I am facing an issue with existing mapping. In few occations mapping type some times referring current settings and some times referring to old mapping due to that data is spilling over so the graphs are getting floating incorrectly. current version logstash 1.5.4.

Need some help on this.

Filed mapping is some thing like below.

current format in collector : var1, timestamp,var2,var3,var4,var5,var6

{  
"\_index": "Indx-yyyy.mm.dd",  
"\_type": "mytype",  
"\_id": "AWGaqLuLzHhJvAINZLbA",  
"\_score": null,  
"\_source": {  
"message": [  
"srv1,2018-02-15T13:10:03.274-0500,9,65046540,22697616,34,42348924"  
],  
"@version": "1",  
"@timestamp": "2018-02-15T18:10:04.260Z",  
"host": "XXXXXXXXXXX",  
"path": "XXXXXXXXXXXXXXXXXXX.log",  
"type": "mytype",  
"server": "XXXXXXXXXXX",  
"run\_timestamp": "2018-02-15T13:10:03.274-0500",  
"var2": 9,  
"var3": 65046540,  
"var4": 22697616,  
"var6": 34,  
"var5": 42348924  
},  
"sort": [  
1518718204260,  
1518718204260  
]  
}

Old format : var1,date,time, var2,var3,var4,var5  
{  
"\_index": "Indx-yyyy.mm.dd",  
"\_type": "mytype",  
"\_id": "AWGaqoyIwVSQTYJf60Yu",  
"\_score": null,  
"\_source": {  
"message": [  
"srv1,2018-02-15T13:12:02.507-0500,9,65046540,22698824,34,42347716"  
],  
"@version": "1",  
"@timestamp": "2018-02-15T18:12:03.314Z",  
"host": "XXXXXXXXXXX",  
"path": "XXXXXXXXXXXXXXXXXXX.log",  
"type": "mytype",  
"server": "XXXXXXXXXXX",  
"date": "2018-02-15T13:12:02.507-0500",  
"time": "9",  
"var2": 65046540,  
"var3": 22698824,  
"var4": 34,  
"var5": 42347716  
},  
"sort": [  
1518718323314,  
1518718323314  
]  
}

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 15, 2018, 9:53pm UTC](https://discuss.elastic.co/t/logstash-reffdering-to-old-index-for-the-mapping/120079/2 "2018-03-15T21:53:59Z")

</div>

Closed on March 15, 2018, 9:53pm UTC

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
