112 lines
3.4 KiB
Plaintext
112 lines
3.4 KiB
Plaintext
{
|
|
"mappings": {
|
|
"message": {
|
|
"properties": {
|
|
"event_type": {
|
|
"index": "not_analyzed",
|
|
"type": "string"
|
|
},
|
|
"Payload": {
|
|
"type": "string"
|
|
},
|
|
"Logger": {
|
|
"index": "not_analyzed",
|
|
"type": "string"
|
|
},
|
|
"programname": {
|
|
"index": "not_analyzed",
|
|
"type": "string"
|
|
},
|
|
"Hostname": {
|
|
"index": "not_analyzed",
|
|
"type": "string"
|
|
},
|
|
"hostname": {
|
|
"index": "not_analyzed",
|
|
"type": "string"
|
|
},
|
|
"Pid": {
|
|
"index": "not_analyzed",
|
|
"type": "long"
|
|
},
|
|
"Severity": {
|
|
"index": "not_analyzed",
|
|
"type": "long"
|
|
},
|
|
"syslogfacility": {
|
|
"index": "not_analyzed",
|
|
"type": "long"
|
|
},
|
|
"Type": {
|
|
"index": "not_analyzed",
|
|
"type": "string"
|
|
},
|
|
"severity_label": {
|
|
"index": "not_analyzed",
|
|
"type": "string"
|
|
},
|
|
"environment_label": {
|
|
"index": "not_analyzed",
|
|
"type": "string"
|
|
},
|
|
"openstack_role": {
|
|
"type": "string",
|
|
"analyzer": "ost_roles"
|
|
},
|
|
"openstack_region": {
|
|
"index": "not_analyzed",
|
|
"type": "string"
|
|
},
|
|
"openstack_release": {
|
|
"index": "not_analyzed",
|
|
"type": "string"
|
|
},
|
|
"deployment_id": {
|
|
"index": "not_analyzed",
|
|
"type": "string"
|
|
},
|
|
"request_id": {
|
|
"index": "not_analyzed",
|
|
"type": "string"
|
|
},
|
|
"tenant_id": {
|
|
"index": "not_analyzed",
|
|
"type": "string"
|
|
},
|
|
"user_id": {
|
|
"index": "not_analyzed",
|
|
"type": "string"
|
|
},
|
|
"launched_at": {
|
|
"type": "date",
|
|
"format": "dateOptionalTime"
|
|
},
|
|
"created_at": {
|
|
"type": "date",
|
|
"format": "dateOptionalTime"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
"settings": {
|
|
"analysis": {
|
|
"tokenizer": {
|
|
"comma" : {
|
|
"type": "pattern",
|
|
"pattern": ","
|
|
}
|
|
},
|
|
"analyzer": {
|
|
"ost_roles": {
|
|
"type": "custom",
|
|
"tokenizer": "comma",
|
|
"filter": ["lowercase"]
|
|
}
|
|
}
|
|
},
|
|
"number_of_shards": <%= @number_of_shards %>,
|
|
"number_of_replicas": <%= @number_of_replicas %>
|
|
},
|
|
"template": "<%= @index_prefix %>-*"
|
|
}
|