I am facing some issues in elasticsearch mapping.Although i have check the forum the solution is reindexing but why?
GET _template/winlogbeat_sysmon
{
"winlogbeat_sysmon" : {
"order" : 0,
"index_patterns" : [
"log-wlb-sysmon-*"
],
"settings" : {
"index" : {
"lifecycle" : {
"name" : "winlogbeat_sysmon_policy",
"rollover_alias" : "log-wlb-sysmon"
},
"refresh_interval" : "1s",
"number_of_shards" : "1",
"number_of_replicas" : "1"
}
},
"mappings" : {
"properties" : {
"geoip" : {
"type" : "object",
"properties" : {
"ip" : {
"type" : "ip"
},
"latitude" : {
"type" : "half_float"
},
"location" : {
"type" : "geo_point"
},
"longitude" : {
"type" : "half_float"
}
}
},
"dst_ip_addr" : {
"index" : true,
"store" : false,
"type" : "ip",
"doc_values" : true
}
}
},
"aliases" : { }
}
}
I have never seen such mapping problem it was working fine earlier but when it create new index through ILM,then it shows this error and we are not sure if we do reindexing today does it show the same problem in future ? why this happened?