Improved filebeat template

elastic · Oct 20, 2015 · 65e83f7 · 65e83f7
1 parent e473025
commit 65e83f7
Showing 1 changed file with 25 additions and 0 deletions.
diff --git a/etc/filebeat.template.json b/etc/filebeat.template.json
@@ -7,9 +7,34 @@
           "enabled": false
         }
       },
+      "dynamic_templates": [
+        {
+          "template1": {
+            "mapping": {
+              "doc_values": true,
+              "ignore_above": 1024,
+              "index": "not_analyzed",
+              "type": "{dynamic_type}"
+            },
+            "match": "*"
+          }
+        }
+      ],
       "properties": {
         "timestamp": {
           "type": "date"
+        },
+        "message": {
+          "type": "string",
+          "index": "analyzed"
+        },
+        "line": {
+          "type": "integer",
+          "doc_values": "true"
+        },
+        "offset": {
+          "type": "integer",
+          "doc_values": "true"
         }
       }
     }