Hello dear community!
I have the following annoyance:
Upgraded to GL5.0.2 from 4.3.11
I had customized filed types for IP-related stuff made with _template (in ES 7.8 I had before upgrade)
Now if I use template it totally messes up all “automagical” field mappings and results in unusable data, where ALL BUT fields configured in the template are considered as “text” type and no log rows are displayed only an OS-error/warning. Deleting template and rotates “fixes” problem but then fex all the IP-related fields are of the type “keyword” and no network-searches can be made.
That was not the case before, template changed ONLY given field types.
- OS Information:
So far I have tried (in OS) _index_template and _index_template with _component_template ; same result.
There must be a way other than making a huge template from results from _mapping query ?!
Any help dearly appriciated