I recently upgraded our ELK setup to 6.2.2 from 5.6.5. I have two types of log and previously in 5.6.5, I used document_type (in filebeat) and separated those two logs in to separate index in logstash. So the _type field determines what type of log it is and based on that visualizations are drawn.
Now that _type is deprecated , I see in Kibana that _type field simply equals to doc and the visualizations are not working. Although, I get the logs in discover page.
Once I downgraded both logstash and filebeat to 5.6.5, I can see the visualizations (with _type field equals to the log type).
Any help appreciated.