cat << EOF > graylog-custom-mapping.json
{
"template": "graylog_*",
"mappings" : {
"properties" : {
"level" : {
"type" : "keyword"
}
}
}
}
EOF
curl -X PUT -d @graylog-custom-mapping.json 'http://localhost:9200/_template/graylog-custom-mapping?pretty' -H 'Content-Type: application/json'
https://community.graylog.org/t/custom-mapping-not-applied-to-indices/12854