Rejecting mapping update

Elastic Stack Beats
11

So right now you have a 5.x index that contains two different types, and you want to reindex every type into a different new index.

I understand that the way of achieving this is to use the type filtering in the reindex API as explained here: Reindex API | Elasticsearch Guide [8.11] | Elastic

Something like:

POST _reindex
{
  "source": {
    "index": "logstash-YYYY.MM.DD",
    "type": "logs",
  },
  "dest": {
    "index": "logstash-YYYY.MM.DD-logs-reindexed"
  }
}

and

POST _reindex
{
  "source": {
    "index": "logstash-YYYY.MM.DD",
    "type": "kube-logs",
  },
  "dest": {
    "index": "logstash-YYYY.MM.DD-kube-logs-reindexed"
  }
}

You can also map all your documents to the same index, by removing the type information, as explained here:

Otherwise, you will get more authoritative answers in elasticsearch

1 Like