default mapping file : $ES_HOME/conf/default-mapping.json
{
"_default_" : {
"_ttl" : {
"enabled" : true,
"default" : 7776000000
},
"_source" : {
"enabled" : false
},
"properties" : {
"env" : {
"type" : "string",
"index" : "not_analyzed"
},
"eventbody" : {
"type" : "string"
},
"hostname" : {
"type" : "string",
"index" : "not_analyzed"
},
"logfilename" : {
"type" : "string",
"index" : "not_analyzed"
},
"logpath" : {
"type" : "string",
"index" : "not_analyzed"
},
"logtype" : {
"type" : "string",
"index" : "not_analyzed"
},
"timestamp" : {
"type" : "long",
"ignore_malformed" : false
},
"nanotime" : {
"type" : "long",
"ignore_malformed" : false
}
}
}
}