Skip to content

Instantly share code, notes, and snippets.

@untergeek
Last active March 16, 2019 12:38
Show Gist options
  • Save untergeek/7359994 to your computer and use it in GitHub Desktop.
Save untergeek/7359994 to your computer and use it in GitHub Desktop.
Logstash v1.2+ Elasticsearch Mapping Template
{
"template" : "logstash-*",
"settings" : {
"index.refresh_interval" : "5s",
"analysis" : {
"analyzer" : {
"default" : {
"type" : "standard",
"stopwords" : "_none_"
}
}
}
},
"mappings" : {
"_default_" : {
"_all" : {"enabled" : true},
"dynamic_templates" : [ {
"string_fields" : {
"match" : "*",
"match_mapping_type" : "string",
"mapping" : {
"type" : "multi_field",
"fields" : {
"{name}" : {"type": "string", "index" : "analyzed", "omit_norms" : true, "index_options" : "docs"},
"{name}.raw" : {"type": "string", "index" : "not_analyzed", "ignore_above" : 256}
}
}
}
} ],
"properties" : {
"@version": { "type": "string", "index": "not_analyzed" },
"geoip" : {
"type" : "object",
"dynamic": true,
"path": "full",
"properties" : {
"location" : { "type" : "geo_point" }
}
}
}
}
}
}
@MrHash
Copy link

MrHash commented Nov 22, 2013

Please post any updates to this template here also. Thanks

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment