smonnet/template.json at master · jforjohn/smonnet · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
{
  "template" : "sflow-*",
  "settings" : {
      "number_of_shards" : 3,
      "number_of_replicas" : 1,
      "translog.durability": "async",
      "refresh_interval": "5s"
  },
  "mappings": {
    "sflow": {
      "properties": {
        "@timestamp": {
          "type": "date",
          "format": "strict_date_optional_time||epoch_millis"
        },
        "sflow_NEWsrcIP": {
          "type": "ip"
        },
        "sflow_NEWdstIP": {
          "type": "ip"
        },
        "sflow_srcIP": {
          "type": "ip"
        },
        "sflow_dstIP": {
          "type": "ip"
        },
        "sflow_src_location": {
          "type": "geo_point"
        },
        "sflow_dst_location": {
          "type": "geo_point"
        }
      }
    }
  }
}