Logstash default mapping with doc_values added
ActivePublic
Actions

Authored by bd808 on Nov 3 2014, 11:26 PM.

Project Tags

Referenced Files

	F643: Logstash_default_mapping_with_doc_values_added
	Nov 3 2014, 11:35 PM

	F642: Logstash_default_mapping_with_doc_values_added
	Nov 3 2014, 11:26 PM

Subscribers

None

	{
	"template" : "logstash-*",
	"settings" : {
	"index.analysis.analyzer.default.stopwords" : "_none_",
	"index.refresh_interval" : "5s",
	"index.number_of_replicas" : "1",
	"index.number_of_shards" : "1",
	"index.routing.allocation.total_shards_per_node" : "1",
	"index.cache.field.type" : "soft",
	"index.analysis.analyzer.default.type" : "standard"
	},
	"mappings" : {
	"_default_" : {
	"dynamic_templates" : [ {
	"string_fields" : {
	"mapping" : {
	"type" : "multi_field",
	"fields" : {
	"raw" : {
	"type" : "string",
	"index": "no",
	"fielddata": {
	"format": "doc_values"
	}
	},
	"{name}" : {
	"index" : "analyzed",
	"omit_norms" : true,
	"type" : "string"
	}
	}
	},
	"match" : "*",
	"match_mapping_type" : "string"
	}
	} ],
	"properties" : {
	"message" : {
	"index" : "analyzed",
	"omit_norms" : true,
	"type" : "string"
	},
	"tags" : {
	"index_name" : "tag",
	"index" : "not_analyzed",
	"type" : "string"
	},
	"udp_sender" : {
	"index" : "not_analyzed",
	"type" : "string"
	},
	"@timestamp" : {
	"index" : "not_analyzed",
	"type" : "date"
	},
	"host" : {
	"index" : "not_analyzed",
	"type" : "string"
	},
	"geoip" : {
	"dynamic" : true,
	"path" : "full",
	"properties" : {
	"location" : {
	"type" : "geo_point"
	}
	},
	"type" : "object"
	},
	"type" : {
	"index" : "not_analyzed",
	"type" : "string"
	},
	"@version" : {
	"index" : "not_analyzed",
	"type" : "string"
	},
	"sequence_id" : {
	"type" : "long"
	}
	},
	"_all" : {
	"enabled" : true
	}
	}
	},
	"aliases" : { }
	}

Event Timeline

bd808 changed the title of this paste from untitled to Logstash default mapping with doc_values added.

bd808 updated the paste's language from autodetect to json.

Applied on production ELK cluster via: