Logstash v1.2+ Elasticsearch Mapping Template
| { | |
| "template" : "logstash-*", | |
| "settings" : { | |
| "index.refresh_interval" : "5s", | |
| "analysis" : { | |
| "analyzer" : { | |
| "default" : { | |
| "type" : "standard", | |
| "stopwords" : "_none_" | |
| } | |
| } | |
| } | |
| }, | |
| "mappings" : { | |
| "_default_" : { | |
| "_all" : {"enabled" : true}, | |
| "dynamic_templates" : [ { | |
| "string_fields" : { | |
| "match" : "*", | |
| "match_mapping_type" : "string", | |
| "mapping" : { | |
| "type" : "multi_field", | |
| "fields" : { | |
| "{name}" : {"type": "string", "index" : "analyzed", "omit_norms" : true, "index_options" : "docs"}, | |
| "{name}.raw" : {"type": "string", "index" : "not_analyzed", "ignore_above" : 256} | |
| } | |
| } | |
| } | |
| } ], | |
| "properties" : { | |
| "@version": { "type": "string", "index": "not_analyzed" }, | |
| "geoip" : { | |
| "type" : "object", | |
| "dynamic": true, | |
| "path": "full", | |
| "properties" : { | |
| "location" : { "type" : "geo_point" } | |
| } | |
| } | |
| } | |
| } | |
| } | |
| } |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
This comment has been minimized.
Please post any updates to this template here also. Thanks