Greetings - i have an issue where I upload a template to be applied to indices that start with logstash* , The problem i have is that once I upload it the correct fields get their type, integers to be specific. but all fields are missing from the main discovery field. Removal of the template returns the fields ( after deleting the indices and allowing new data to come in and refreshing the fields, but the field format are gone.) While the template is applied the visualizations I have work fine, but I just can't search the data in the discovery window. The fields are missing on the left hand side though.
Anybody have any idea whats happening.
below is the template.
{
"logstash": {
"order": 0,
"template": "logstash*",
"settings": {
"index": {
"number_of_shards": "5"
}
},
"mappings": {
"application_logs": {
"_source": {
"enabled": false
},
"properties": {
"rs": {
"type": "integer"
},
"lat_time": {
"type": "integer"
},
"pt": {
"type": "integer"
},
"input_bytes": {
"type": "integer"
},
"rtdgp_host": {
"index": "true",
"type": "keyword"
},
"scores": {
"type": "integer"
},
"output_bytes": {
"type": "integer"
},
"app_depth": {
"type": "integer"
},
"net": {
"type": "integer"
},
"iot": {
"type": "integer"
}
}
}
},
"aliases": {}
}
}