In Nginx, I've converted my log_format to json and sending the logs via Filebeat to logstash. I'm trying to set some of my fields to not_analyzed but nothing I'm doing is working. Almost all the fields from nginx logs are being set to analzyed. I'm testing out ELK so I've been repeatedly removing…

Template not being applied to elasticsearch output

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Template not being applied to elasticsearch output