Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Remove document_type from Filebeat #4204

Merged
merged 2 commits into from
May 9, 2017
Merged

Conversation

ruflin
Copy link
Member

@ruflin ruflin commented May 4, 2017

The _type field was removed in elasticsearch 6.0. The initial intention of document_type was to define different _type. As this does not exist anymore the config option was removed. It is recommend to use fields instead to add specific fields to a prospector.

  • Adjust tests accordingly

@tsg
Copy link
Contributor

tsg commented May 4, 2017

LGTM. I think we should deprecate the "document_type" option and the "type" output field in 5.5, right?

@ruflin
Copy link
Member Author

ruflin commented May 5, 2017

Here is the PR to deprecate documen_type: #4225

@ruflin ruflin force-pushed the remove-document-type branch 2 times, most recently from b155c7a to 28edc31 Compare May 5, 2017 11:19
The `_type` field was removed in elasticsearch 6.0. The initial intention of `document_type` was to define different `_type`. As this does not exist anymore the config option was removed. It is recommend to use `fields` instead to add specific fields to a prospector.

* Adjust tests accordingly
@tsg tsg merged commit 03f2e0c into elastic:master May 9, 2017
@tsg tsg mentioned this pull request Jul 24, 2017
28 tasks
@songlong
Copy link

songlong commented Sep 5, 2017

but I can get _type in elasticsearch _type
how to change _type content?

{
"took": 2,
"timed_out": false,
"_shards": {
"total": 5,
"successful": 5,
"failed": 0
},
"hits": {
"total": 190,
"max_score": 1,
"hits": [
{
"_index": "filebeat-2017.09.05",
"_type": "doc",
"_id": "AV5RdtRxzLm-HqSBIOFT",
"_score": 1,
"_source": {
"@timestamp": "2017-09-05T09:54:51.735Z",
"beat": {
"hostname": "s14.wzb.zwt.qihoo.net",
"name": "s14.wzb.zwt.qihoo.net",
"version": "5.5.2"
},
"body_bytes_sent": "29",
"fields": {
"type": "fotest"
},
"http_referrer": "-",
"http_user_agent": "Apache-HttpClient/4.5.2 (Java/1.8.0_73)",
"http_x_forwarded_for": "-",
"input_type": "log",
"offset": 414986605,
"remote_addr": "220.181.171.121",
"remote_user": "-",
"request": "POST /api/log/protect HTTP/1.1",
"request_method": "POST",
"request_time": "0.759",
"source": "/home/work/es_nginx/logs/access.log",
"status": "200",
"type": "nginx"
}
}
]
}
}

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants