logstash-template

gistfile1.json

    {
       "logstash":
       {
           "order": 0,
           "template": "logstash-*",
           "settings":
           {
               "index.refresh_interval": "5s"
           },
           "mappings":
           {
               "_default_":
               {
                   "dynamic_templates":
                   [
                       {
                           "string_fields":
                           {
                               "mapping":
                               {
                                   "index": "not_analyzed",
                                   "omit_norms": true,
                                   "type": "string",
                                   "fields":
                                   {
                                       "raw":
                                       {
                                           "index": "not_analyzed",
                                           "ignore_above": 256,
                                           "type": "string"
                                       }
                                   }
                               },
                               "match_mapping_type": "string",
                               "match": "*"
                           }
                       }
                   ],
                   "properties":
                   {
                       "username":
                       {
                           "index": "not_analyzed",
                           "ignore_above": 256,
                           "type": "string"
                       },
                       "geoip":
                       {
                           "dynamic": true,
                           "path": "full",
                           "properties":
                           {
                               "location":
                               {
                                   "type": "geo_point"
                               }
                           },
                           "type": "object"
                       },
                       "@version":
                       {
                           "index": "not_analyzed",
                           "type": "string"
                       },
                       "zone":
                       {
                           "index": "not_analyzed",
                           "ignore_above": 256,
                           "type": "string"
                       }
                   },
                   "_all":
                   {
                       "enabled": true
                   }
               },
               "logs":
               {
                   "properties":
                   {
                       "username":
                       {
                           "index": "not_analyzed",
                           "type": "string"
                       },
                       "zone":
                       {
                           "index": "not_analyzed",
                           "type": "string"
                       }
                   },
                   "_all":
                   {
                       "enabled": false
                   }
               }
           },
           "aliases":
           {
           }
       }
    }