From 65e83f792fc76585b0de2d64f4c756390fb6a622 Mon Sep 17 00:00:00 2001 From: ruflin Date: Tue, 20 Oct 2015 17:16:15 +0200 Subject: [PATCH] Improved filebeat template --- etc/filebeat.template.json | 25 +++++++++++++++++++++++++ 1 file changed, 25 insertions(+) diff --git a/etc/filebeat.template.json b/etc/filebeat.template.json index 581ad6a6d16..503ae78415b 100644 --- a/etc/filebeat.template.json +++ b/etc/filebeat.template.json @@ -7,9 +7,34 @@ "enabled": false } }, + "dynamic_templates": [ + { + "template1": { + "mapping": { + "doc_values": true, + "ignore_above": 1024, + "index": "not_analyzed", + "type": "{dynamic_type}" + }, + "match": "*" + } + } + ], "properties": { "timestamp": { "type": "date" + }, + "message": { + "type": "string", + "index": "analyzed" + }, + "line": { + "type": "integer", + "doc_values": "true" + }, + "offset": { + "type": "integer", + "doc_values": "true" } } }