# Template creates file.file.raw, message.message.raw etc

**URL:** <https://discuss.elastic.co/t/template-creates-file-file-raw-message-message-raw-etc/24575>\
**Category:** Logstash\
**Created:** [June 29, 2015, 8:57pm UTC](https://discuss.elastic.co/t/template-creates-file-file-raw-message-message-raw-etc/24575 "2015-06-29T20:57:31Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Mike\_4](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mike_4/32/1962_2.png) [@Mike\_4](https://discuss.elastic.co/u/Mike_4)\
**Post date:** [June 29, 2015, 8:57pm UTC](https://discuss.elastic.co/t/template-creates-file-file-raw-message-message-raw-etc/24575/1 "2015-06-29T20:57:31Z")

</div>

hi,

i want to set fields of a specific index to "not\_analyzed". I took [https://github.com/logstash-plugins/logstash-output-elasticsearch/blob/master/lib/logstash/outputs/elasticsearch/elasticsearch-template.json](https://github.com/logstash-plugins/logstash-output-elasticsearch/blob/master/lib/logstash/outputs/elasticsearch/elasticsearch-template.json)

changed

```
{

```

"template" : "logstash-\*",

to my index name

```
{

```

"template" : "applogs-\*",

and referenced this file in logstash

```
   several outputs
   .....
    if [type] == "applogs" {
   elasticsearch {
    host => "127.0.0.1"
    cluster =>"logstash"
    index => "applogs-%{+YYYY.MM.dd}"
    template => "/etc/logstash/templates/mapping.json"
    template_overwrite => true
    template_name => "applogs"
   }
}

```

deleted the old index and restarted everything.

The "Settings" page in kibana is now showing

```
file.file.raw 
message.message.raw 

```

etc. for this index.

What\*s wrong?

logstash 1.5.0  
kibana 4.1.0  
elasticsearch 1.5.2

Thx

Mike

update

```
curl localhost:9200/applogs-2015.06.29/

```

shows file.raw so it seems to be fine. maybe a kibana bug

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 5:36am UTC](https://discuss.elastic.co/t/template-creates-file-file-raw-message-message-raw-etc/24575/2 "2017-07-06T05:36:01Z")

</div>