How to modify _source parameters in Elasticsearch mapping? -
i'm new elasticsearch (elk) , i'm working on project done external company, won't support i'm trying making changes myself.
what i'm trying changing field name, since data coming elasticsearch has changed bit.
if run this:
curl 'http://localhost:9200/_search?pretty'
i mappings (i guess word). looks (simplified bit):
{ "_index" : ".kibana", "_type" : "visualization", "_id" : "count-by-clusters", "_score" : 1.0, "_source":{ "title":"count clusters", "visstate":"{ "type": "histogram", "params": {}, "aggs": [ { "id": "1", "type": "terms", "schema": "group", "params": { "field": "cluster.id", "size": 5, "order": "desc", "orderby": "1" } }, { ... } ] } } }, { "_index" : ".kibana", "_type" : "visualization", "_id" : "users-by-clusters", "_score" : 1.0, "_source":{ "title":"users clusters", "visstate":"{ "type": "histogram", "params": {}, "aggs": [ { "id": "1", "type": "terms", "schema": "group", "params": { "field": "cluster.id", "size": 5, "order": "desc", "orderby": "1" } }, { ... } ] } } }
there 8 of these mappings, showed 2 of them.
the problem is, "field": "cluster.id"
has "field": "cluster_id"
, can't seem find way change that.
i tried create new mappings, error message saying .kibana
exists, though have not one, 8 of these mappings "_index" : ".kibana"
.
i've searched documentation i'm still stuck. maybe i'm looking wrong places. appreciate and/or pointers how this.
thanks.
the error getting because .kibana default index. can re-try first deleting .kibana index using following command:-
curl -xdelete localhost:9200/.kibana
where localhost elasticsearch server address followed port.
after deleting try create mappings have been trying.
Comments
Post a Comment