7x index template updates

This commit updates the Elasticsearch index templates to be compatible with 7.x
* removes types
* remove _all
* template -> index_patterns

Fixes #10375
This commit is contained in:
Jake Landis 2019-02-01 15:39:49 -06:00
parent 48ee9987cc
commit b53d79c148
4 changed files with 3 additions and 14 deletions

View file

@ -1,9 +1,5 @@
{
"mappings": {
"_default_": {
"_all": {
"norms": false
},
"_meta": {
"version": "5.4.0"
},
@ -668,12 +664,11 @@
"type": "keyword"
}
}
}
},
"order": 0,
"settings": {
"index.mapping.total_fields.limit": 10000,
"index.refresh_interval": "5s"
},
"template": "fb_apache-*"
"index_patterns": "fb_apache-*"
}

View file

@ -1,8 +1,7 @@
{
"order": 0,
"template": "netflow-*",
"index_patterns": "netflow-*",
"mappings": {
"_default_": {
"_meta": {
"version": "7.0.0"
},
@ -1048,7 +1047,6 @@
}
}
}
}
},
"aliases": { }
}

View file

@ -1,8 +1,7 @@
{
"order": 0,
"template": "arcsight-*",
"index_patterns": "arcsight-*",
"mappings": {
"_default_": {
"_meta": {
"version": "7.0.0"
},
@ -219,4 +218,3 @@
}
}
}
}

View file

@ -6,7 +6,6 @@
"number_of_shards": 1
},
"mappings" : {
"_doc" : {
"dynamic_templates" : [ {
"message_field" : {
"path_match" : "message",
@ -43,4 +42,3 @@
}
}
}
}