{ "template": "log*", "order":10, "settings": { "index":{ "refresh_interval" :"30s", "number_of_shards": "6", "number_of_replicas": "1", "translog.flush_threshold_size": "1024mb", "translog.durability": "async" } }, "mappings" :{ "logs" :{ "properties": { "Date": { "type": "date" }, "Level": { "type": "keyword" }, "Class": { "type": "keyword" } } } } }
{ "template": "live*", "order":0, "settings": { "index":{ "refresh_interval" :"30s", "number_of_shards": "6", "number_of_replicas": "1", "translog.flush_threshold_size": "1024mb", "translog.durability": "async" } }, "mappings" :{ "logs" :{ "properties": { "@timestamp": { "type": "date" }, "Date": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } }, "Level": { "type": "keyword", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } }, "Thread": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } }, "RequestId": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } }, "Class": { "type": "keyword", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } }, "msg": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } } } } } }
修改版本 { "order": 9, "template": "live*", "settings": { "index": { "refresh_interval": "30s", "number_of_shards": "6", "translog": { "flush_threshold_size": "1024mb", "durability": "async" }, "number_of_replicas": "1" } }, "mappings": { "live-front": {-----------》这里的值不是随便写的。这里写成你的type的值 "properties": { "@timestamp": { "type": "date" }, "Class": { "type": "text" }, "Date": { "type": "date", "format": "yyyy-MM-dd HH:mm:ss.SSS" }, "Level": { "type": "keyword" }, "RequestId": { "type": "text" }, "Thread": { "type": "text" }, "beat": { "properties": { "hostname": { "type": "keyword" } } }, "kafka": { "properties": { "consumer_group": { "type": "keyword" }, "offset": { "type": "long" }, "partition": { "type": "long" }, "topic": { "type": "keyword" } } }, "msg": { "type": "text" }, "source": { "type": "keyword" }, "type": { "type": "keyword" } } } } }