Hello.
After cleaning all leasticsearch indexes, i've recreated the logstash-* index, but all .raw fields disappear!
Is there any easy way to get unanalysed .raw fields back?
I've tried to complete reinstall elasticsearch, but no luck.
Thanks.
How did you recreate the logstash index? Do you have a template in place for logstash-*? You can view templates here: http://localhost:9200/_template/
If you query the index, do you have dynamic mappings for raw? Grab a logstash index from http://localhost:9200/_cat/indices?v and view the index. Ex: http://localhost:9200/logstash-0/