Reindex with pipeline not working with Rollup Index

Elastic Stack Elasticsearch
1

Hello!

Im trying to reindex a rollup index with a pipeline, but the job is not recognizing any field. It shows the following error: field [beat] not present as part of path [beat.hostname.keyword.terms._count]. for each field. If i active the ignore_missing option, the pipeline does not do anything.

This is my pipeline for now:

{
  "processors": [
    {
      "remove": {
        "field": [
          "beat.hostname.keyword.terms._count",
          "beat.hostname.terms._count",
          "beat.version.keyword.terms._count",
          "beat.version.terms._count",
          "host.architecture.terms._count",
          "host.os.family.terms._count",
          "host.os.platform.keyword.terms._count",
          "host.os.platform.terms._count",
          "metricset.module.terms._count",
          "metricset.name.terms._count",
          "system.process.cmdline.keyword.terms._count",
          "system.process.cmdline.terms._count",
          "system.process.name.keyword.terms._count",
          "system.process.name.terms._count",
          "system.process.pid.terms._count",
          "system.process.ppid.terms._count",
          "system.process.state.terms._count",
          "system.process.username.keyword.terms._count",
          "system.process.username.terms._count",
          "@timestamp.date_histogram._count",
          "@timestamp.date_histogram.timestamp "
        ]
      }
    }
  ]
}
2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.