Hello all,
I recently upgraded to ELK 7.0 and I am having problems with a pipeline.
Previously, I did not have any template set, so it was using the default logstash template. After the update, errors were being thrown in the LS log along the lines of "The [default] mapping cannot be updated on index ... ... defaults mappings are not useful anymore now that indices can have at most one type."
So, after a quick google, I found the solution was to delete the old LS template and restart LS. Unfortunately, that did not resolve it. So, I thought, well, lets toss it a template and see if that does anything.
Again, nothing. Any thoughts? At this point I am tempted to try a completely new pipeline & index name.