Sorry. The code i posted was not what I ran against my data. Here's what I ran:
PUT metricbeat-*/_mapping/doc
{
"properties": {
"DATAFIELDTOBEALTERED": {
"type": "text",
"fielddata": true
}
}
}
I ran this against the various fields the visualizations complained about.
I didn't reload the template from 6.5.1, so maybe that is an issue. I ran "GET _template/metricbeat" which returns a huge ~10K line template. That's what you want me to post? Finally, you're looking for the /var/log/metricbeat logs?