# Update\_mapping (dynamic) showing up in log **URL:** \ **Category:** Elasticsearch\ **Created:** [July 9, 2013, 9:31am UTC](https://discuss.elastic.co/t/update-mapping-dynamic-showing-up-in-log/12713 "2013-07-09T09:31:37Z")\ **Posts on this page:** 4\ **Page:** 1
**Author:** ![subin](https://avatars.discourse-cdn.com/v4/letter/s/58956e/32.png) [@subin](https://discuss.elastic.co/u/subin)\ **Post date:** [July 9, 2013, 9:31am UTC](https://discuss.elastic.co/t/update-mapping-dynamic-showing-up-in-log/12713/1 "2013-07-09T09:31:37Z")
HI, I have Logstash feeding Elasticsearch 0.90.2. I start off ES server with this _custom [https://gist.github.com/anonymous/5955942](https://gist.github.com/anonymous/5955942)_ template for logstash's logs. When logs come in I see the below in ES's log file: [2013-07-09 04:34:48,241][INFO][cluster.metadata] [Logstash] [logstash-2013.07.09] update\_mapping [postfix] (dynamic) [2013-07-09 04:35:40,518][INFO][cluster.metadata] [Logstash] [logstash-2013.07.09] update\_mapping [bind] (dynamic) [2013-07-09 04:41:16,725][INFO][cluster.metadata] [Logstash] [logstash-2013.07.09] update\_mapping [syslog] (dynamic) (postfix,bind and syslog correspond to 'type' being set for each log file when they were shipped from source server by another logstash application) Does this 'update\_mapping' message imply that it is overriding the default mappings which was set via the custom template? Re, -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out). ---
**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Post date:** [July 9, 2013, 10:24am UTC](https://discuss.elastic.co/t/update-mapping-dynamic-showing-up-in-log/12713/2 "2013-07-09T10:24:48Z")
It means that new fields that you did not define previously appear in your doc. Therefore, es needs to update the mapping. -- David 😉 Twitter : @dadoonet / @elasticsearchfr / @scrutmydocs Le 9 juil. 2013 à 11:31, subin [ksubins321@gmail.com](mailto:ksubins321@gmail.com) a écrit : HI, I have Logstash feeding Elasticsearch 0.90.2. I start off ES server with this custom template for logstash's logs. When logs come in I see the below in ES's log file: [2013-07-09 04:34:48,241][INFO][cluster.metadata] [Logstash] [logstash-2013.07.09] update\_mapping [postfix] (dynamic) [2013-07-09 04:35:40,518][INFO][cluster.metadata] [Logstash] [logstash-2013.07.09] update\_mapping [bind] (dynamic) [2013-07-09 04:41:16,725][INFO][cluster.metadata] [Logstash] [logstash-2013.07.09] update\_mapping [syslog] (dynamic) (postfix,bind and syslog correspond to 'type' being set for each log file when they were shipped from source server by another logstash application) Does this 'update\_mapping' message imply that it is overriding the default mappings which was set via the custom template? ## Re, You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out). -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out). ---
**Author:** ![subin](https://avatars.discourse-cdn.com/v4/letter/s/58956e/32.png) [@subin](https://discuss.elastic.co/u/subin)\ **Post date:** [July 10, 2013, 4:57am UTC](https://discuss.elastic.co/t/update-mapping-dynamic-showing-up-in-log/12713/3 "2013-07-10T04:57:30Z")
Thanks for clearing it David. Re, On Tue, Jul 9, 2013 at 3:54 PM, David Pilato [david@pilato.fr](mailto:david@pilato.fr) wrote: > It means that new fields that you did not define previously appear in your > doc. > Therefore, es needs to update the mapping. > > -- > David 😉 > Twitter : @dadoonet / @elasticsearchfr / @scrutmydocs > > Le 9 juil. 2013 à 11:31, subin [ksubins321@gmail.com](mailto:ksubins321@gmail.com) a écrit : > > HI, > > I have Logstash feeding Elasticsearch 0.90.2. I start off ES server with > this _custom [https://gist.github.com/anonymous/5955942](https://gist.github.com/anonymous/5955942)_ template for > logstash's logs. > When logs come in I see the below in ES's log file: > > [2013-07-09 04:34:48,241][INFO][cluster.metadata] [Logstash] > [logstash-2013.07.09] update\_mapping [postfix] (dynamic) > [2013-07-09 04:35:40,518][INFO][cluster.metadata] [Logstash] > [logstash-2013.07.09] update\_mapping [bind] (dynamic) > [2013-07-09 04:41:16,725][INFO][cluster.metadata] [Logstash] > [logstash-2013.07.09] update\_mapping [syslog] (dynamic) > > (postfix,bind and syslog correspond to 'type' being set for each log file > when they were shipped from source server by another logstash application) > > Does this 'update\_mapping' message imply that it is overriding the default > mappings which was set via the custom template? > > Re, > > -- > You received this message because you are subscribed to the Google Groups > "elasticsearch" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). > > For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out). > > -- > You received this message because you are subscribed to a topic in the > Google Groups "elasticsearch" group. > To unsubscribe from this topic, visit > [https://groups.google.com/d/topic/elasticsearch/SB9lhnpWd0E/unsubscribe](https://groups.google.com/d/topic/elasticsearch/SB9lhnpWd0E/unsubscribe). > To unsubscribe from this group and all its topics, send an email to > [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). > For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out). -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out). ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 6, 2017, 2:27am UTC](https://discuss.elastic.co/t/update-mapping-dynamic-showing-up-in-log/12713/4 "2017-07-06T02:27:22Z")