Merge pull request #106 from weslambert/master

disable _all field
dougburks · Sep 5, 2017 · 2f053a4 · 2f053a4
2 parents 4cdf2db + 3230f38
commit 2f053a4
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/etc/logstash/logstash-template.json b/etc/logstash/logstash-template.json
@@ -8,7 +8,7 @@
   },
   "mappings" : {
     "_default_" : {
-      "_all" : {"enabled" : true, "norms" : false},
+      "_all" : {"enabled" : false, "norms" : false},
       "dynamic_templates" : [ {
         "message_field" : {
           "path_match" : "message",
@@ -31,8 +31,8 @@
         }
       } ],
       "properties" : {
-        "@timestamp": { "type": "date", "include_in_all": false },
-        "@version": { "type": "keyword", "include_in_all": false },
+        "@timestamp": { "type": "date" },
+        "@version": { "type": "keyword" },
 	"destination_ip" : { "type": "ip" },
 	"source_ip" : { "type": "ip" },
         "geoip"  : {