Elasticsearch has different field information for index generated from template

Attempting to analyze access logs in Elasticsearch 5.5.

"I registered the template ""access_log-template"" to generate a daily index such as ""access_log-2017.10.25"", but the daily text is as follows."
Do you know the cause?
I use Fluentd for data registration.

·The agent field set to keyword becomes text+keyword

·Long code field becomes text+keyword

JSON

for registered templates

{
  "template": "access_log-*",
  "mappings": {
    "access_log":{
      "_source": {"enabled":false},
      "properties": {
        "code": {"type": "long"},
        "agent": {"type":"keyword"}
      }
    }
  }
}

Mapping Information

{
  "access_log-template": {
    "mappings": {
      "access_log":{
        "_source": {
          "enabled"—false
        },
        "properties": {
          "agent": {
            "type": "keyword"
          },
          "code": {
            "type": "long"
          }
        }
      }
    }
  },
  "access_log-2017.10.25": {
    "mappings": {
      "access_log":{
        "properties": {
          "@tag_key_name":{
            "type": "text",
            "fields": {
              "keyword": {
                "type": "keyword",
                "ignore_above": 256
              }
            }
          },
          "@timestamp":{
            "type": "date"
          },
          "agent": {
            "type": "text",
            "fields": {
              "keyword": {
                "type": "keyword",
                "ignore_above": 256
              }
            }
          },
          "code": {
            "type": "text",
            "fields": {
              "keyword": {
                "type": "keyword",
                "ignore_above": 256
              }
            }
          }
        }
      }
    }
  }
}

elasticsearch

2022-09-30 19:06

1 Answers

Self-resolved.

The template registration API URL was just wrong...
https://www.elastic.co/guide/en/elasticsearch/reference/5.5/indices-templates.html

2022-09-30 19:06

If you have any answers or tips

Popular Tags

python x 4647

android x 1593

java x 1494

javascript x 1427

c x 927

c++ x 878

ruby-on-rails x 696

php x 692

python3 x 685

html x 656