I upgrade my installation of elastic from 7.6 to 7.6.1 and break my dashboards.
In my visualizations I used split by Terms=source.ip and now I have error that field not exist.
Now I can select source.ip.keywords only.
What this mean?
It sounds like a change in mapping of your fields. How did you do your upgrade and did you do any other change with the upgrade (reindex, snapshot restore, etc) ?
Sorry for delay. It's my issue. I had upgrade filebeat before upgrade template mapping in elasticsearch.
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.