FYI we’ve renamed ELK to the Elastic Stack, otherwise Beats feels left out ;)

Did you do an upgrade, or is this a separate stack? Is that code the mapping? What does the 5.5.2 mapping look like? What does your filebeat config look like?

---