Missing mappings in monitoring-logstash-mb template #125499
Description
Elasticsearch Version
8.17.3
Installed Plugins
No response
Java Version
bundled
OS Version
Elastic Cloud Service
Problem Description
After each update of our ECS instances, we have to manually add some missing mapping fields in monitoring templates (in this issue, I'll discuss about logstash monitoring template, ie, ".monitoring-logstash-mb")...
We can retrieve the missing field list by adding a data view on the corresponding datastream, is ".monitoring-logstash-*", all missing fields appear in the "Unmapped field" section on the field panel on Discover.
I can push a merge pull request if needed...
Steps to Reproduce
- Add metricbeat to monitor a Logstash instance in a Elasticsearch cluster
- This will automatically create ".monitoring-logstash-mb" template
- Create a dataview on ".monitoring-logstash-*"
- Got to Discover and have a look to Unmapped fields in fields panel
Logs (if relevant)
No response