# What does mean the "make update" in defining field mapping in filebeat document?
**URL:** https://discuss.elastic.co/t/what-does-mean-the-make-update-in-defining-field-mapping-in-filebeat-document/313652
**Category:** Beats
**Tags:** filebeat
**Created:** [September 5, 2022, 7:33am UTC](https://discuss.elastic.co/t/what-does-mean-the-make-update-in-defining-field-mapping-in-filebeat-document/313652 "2022-09-05T07:33:49Z")
**Posts on this page:** 6
**Page:** 1
### Author:  [@Siavash\_Fazli](https://discuss.elastic.co/u/Siavash_Fazli)
#### Post date: [September 5, 2022, 7:33am UTC](https://discuss.elastic.co/t/what-does-mean-the-make-update-in-defining-field-mapping-in-filebeat-document/313652/1 "2022-09-05T07:33:49Z")
Hi guys!
I need to change some fields type (event.original) in the fields.yml in the filebeat configuration.
But my changes don't apply in indexes after restarting filebeat.
there is a command in filebeat documentation that I can't find where I should run it:
documentation link:
> **[Defining field mappings | Beats Developer Guide \[7.16\] | Elastic](https://www.elastic.co/guide/en/beats/devguide/7.16/event-fields-yml.html)**
and the first line is:
```auto
You must define the fields used by your Beat, along with their mapping details,
in *_meta/fields.yml*. After editing this file, run **make update**.
```
I installed filebeat 7.16.2 from a .deb file on my ubuntu server.
What is the **make run** command??
---
### Author:  [@cheshirecat](https://discuss.elastic.co/u/cheshirecat)
#### Post date: [September 5, 2022, 9:14am UTC](https://discuss.elastic.co/t/what-does-mean-the-make-update-in-defining-field-mapping-in-filebeat-document/313652/2 "2022-09-05T09:14:59Z")
Hello There!
> [@Siavash\_Fazli](#):
>
> make run
The command `make` (docs) is used while compiling programs - as you installed software from \*.deb package you won't need to use this command.
---
### Author:  [@Siavash\_Fazli](https://discuss.elastic.co/u/Siavash_Fazli)
#### Post date: [September 5, 2022, 9:22am UTC](https://discuss.elastic.co/t/what-does-mean-the-make-update-in-defining-field-mapping-in-filebeat-document/313652/3 "2022-09-05T09:22:16Z")
@cheshirecat
yes, I found it a few moments ago.
Now is there any way to change the field type in **fields.yml** file?
---
### Author:  [@cheshirecat](https://discuss.elastic.co/u/cheshirecat)
#### Post date: [September 5, 2022, 9:24am UTC](https://discuss.elastic.co/t/what-does-mean-the-make-update-in-defining-field-mapping-in-filebeat-document/313652/4 "2022-09-05T09:24:42Z")
When you're making changes is filebeat stoped at all nodes?
---
### Author:  [@Siavash\_Fazli](https://discuss.elastic.co/u/Siavash_Fazli)
#### Post date: [September 5, 2022, 9:45am UTC](https://discuss.elastic.co/t/what-does-mean-the-make-update-in-defining-field-mapping-in-filebeat-document/313652/5 "2022-09-05T09:45:09Z")
@cheshirecat
After changes, I restarted several times and even wait one day to see the effect.
but nothing changed.
This is what I want to change(original under event \>\> event.original) line 1761:
```auto
- name: original
level: core
type: keyword
description: 'Raw text message of the entire event. Used to demonstrate log integrity
or where the full log message (before splitting it up into multiple parts) may
be required, e.g. for reindex.
```
I need to change the type: keyword to wildcard
How can I do this?
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [October 3, 2022, 11:45am UTC](https://discuss.elastic.co/t/what-does-mean-the-make-update-in-defining-field-mapping-in-filebeat-document/313652/6 "2022-10-03T11:45:50Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.