Skip to content

Instantly share code, notes, and snippets.

Embed
What would you like to do?
{
"template":"logstash-*",
"settings":{
"index.refresh_interval":"5s"
},
"mappings":{
"_default_":{
"dynamic_templates":[
{
"string_fields":{
"match_mapping_type":"string",
"match":"*",
"mapping":{
"index":"analyzed",
"omit_norms":true,
"type":"string",
"fields":{
"raw":{
"index":"not_analyzed",
"ignore_above":256,
"type":"string"
}
}
}
}
}
],
"properties":{
"geoip":{
"dynamic":true,
"properties":{
"location":{
"type":"geo_point"
}
},
"type":"object"
},
"logsource":{
"index":"not_analyzed",
"type":"string"
},
"pid":{
"index":"not_analyzed",
"type":"long"
},
"program":{
"index":"not_analyzed",
"type":"string"
},
"ident":{
"index":"not_analyzed",
"type":"string"
},
"httpversion":{
"index":"not_analyzed",
"type":"string"
},
"version":{
"index":"not_analyzed",
"type":"string"
},
"referer":{
"index":"not_analyzed",
"type":"string"
},
"referrer":{
"index":"not_analyzed",
"type":"string"
},
"request":{
"index":"not_analyzed",
"type":"string"
},
"responsetime":{
"type":"long",
"ignore_malformed": true,
"null_value" : 0
},
"bytes":{
"type":"long"
},
"response":{
"type":"string",
"index":"not_analyzed"
}
},
"_all":{
"enabled":true
}
}
},
"aliases":{
}
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment