Map keyword field in kibana 6.3.0

Elastic Stack Elasticsearch
18

I think I understand now.

In the logstash template you have:

    "index_patterns": [
      "event-%{+YYYY.MM.dd}"
    ],

Where I believe it should be:

    "index_patterns": [
      "event-*"
    ],

So the logstash template is not applied to your index when the index is created the first time which explains why you have all default elasticsearch behavior.

Also, I don't understand why you have been saying that the index name is Input-2018.10.13 if actually the template is applied on event-*. That does not make sense to me.