From 150eaf59fd659aefb8d290a05aabb46f674de290 Mon Sep 17 00:00:00 2001
From: Wes Lambert <wlambertts@gmail.com>
Date: Wed, 18 Mar 2020 20:05:42 +0000
Subject: [PATCH 1/3] don't load FB template

---
 salt/filebeat/etc/filebeat.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/salt/filebeat/etc/filebeat.yml b/salt/filebeat/etc/filebeat.yml
index 5affc2411..3aa8fa565 100644
--- a/salt/filebeat/etc/filebeat.yml
+++ b/salt/filebeat/etc/filebeat.yml
@@ -226,7 +226,7 @@ output.elasticsearch:
   # Client Certificate Key
   #ssl.key: "/usr/share/filebeat/filebeat.key"
 
-
+setup.template.enabled: false
   # A dictionary of settings to place into the settings.index dictionary
   # of the Elasticsearch template. For more details, please check
   # https://www.elastic.co/guide/en/elasticsearch/reference/current/mapping.html

From 5072095eeb90b5ca4e3ad211827747d89de60a7c Mon Sep 17 00:00:00 2001
From: Wes Lambert <wlambertts@gmail.com>
Date: Wed, 18 Mar 2020 20:15:10 +0000
Subject: [PATCH 2/3] removing mapping types

---
 .../pipelines/templates/so/so-beats-template.json    | 12 +++++-------
 .../pipelines/templates/so/so-common-template.json   |  4 +---
 2 files changed, 6 insertions(+), 10 deletions(-)

diff --git a/salt/logstash/pipelines/templates/so/so-beats-template.json b/salt/logstash/pipelines/templates/so/so-beats-template.json
index f6a9c2d27..a48a6e3eb 100644
--- a/salt/logstash/pipelines/templates/so/so-beats-template.json
+++ b/salt/logstash/pipelines/templates/so/so-beats-template.json
@@ -2,7 +2,6 @@
   "index_patterns": [
     "so-beats-*"
   ],
-  "mappings": {
     "doc": {
       "_meta": {
         "version": "6.1.3"
@@ -1265,12 +1264,11 @@
                   "ignore_above": 1024,
                   "type": "keyword"
                 }
-              }
-            }
-          }
-        }
-      }
-    }
+             }
+           }
+         }
+       }
+     }
   },
   "order": 1,
   "settings": {
diff --git a/salt/logstash/pipelines/templates/so/so-common-template.json b/salt/logstash/pipelines/templates/so/so-common-template.json
index 90241924f..295653dfa 100644
--- a/salt/logstash/pipelines/templates/so/so-common-template.json
+++ b/salt/logstash/pipelines/templates/so/so-common-template.json
@@ -8,7 +8,6 @@
     "index.refresh_interval":"30s"
   },
   "mappings":{
-    "doc":{
        "dynamic": false,
        "date_detection": false,
        "properties":{
@@ -349,7 +348,6 @@
           "type":"object",
           "dynamic": true
         }
-      }
-    }
+     }
   }
 }

From 7a71a2c4593fbbbe88ee1a85bbff6bd3a67e0588 Mon Sep 17 00:00:00 2001
From: Wes Lambert <wlambertts@gmail.com>
Date: Wed, 18 Mar 2020 20:17:57 +0000
Subject: [PATCH 3/3] removing mapping types

---
 salt/logstash/pipelines/templates/so/so-beats-template.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/salt/logstash/pipelines/templates/so/so-beats-template.json b/salt/logstash/pipelines/templates/so/so-beats-template.json
index a48a6e3eb..858f1d5e5 100644
--- a/salt/logstash/pipelines/templates/so/so-beats-template.json
+++ b/salt/logstash/pipelines/templates/so/so-beats-template.json
@@ -2,7 +2,7 @@
   "index_patterns": [
     "so-beats-*"
   ],
-    "doc": {
+    "mappings": {
       "_meta": {
         "version": "6.1.3"
       },