From 7a499c9051c1cf141d97f0a1f1b91fc377c7aa69 Mon Sep 17 00:00:00 2001 From: weslambert Date: Wed, 18 Jan 2023 17:24:07 -0500 Subject: [PATCH] Modify default 'logs-*' template priority --- salt/elasticsearch/defaults.yaml | 61 ++++++++++++++++++++++++++++++++ 1 file changed, 61 insertions(+) diff --git a/salt/elasticsearch/defaults.yaml b/salt/elasticsearch/defaults.yaml index ff96d139b..f883503a0 100644 --- a/salt/elasticsearch/defaults.yaml +++ b/salt/elasticsearch/defaults.yaml @@ -57,6 +57,67 @@ elasticsearch: elasticsearch: deprecation: ERROR index_settings: + so-logs: + index_sorting: False + index_template: + index_patterns: + - "logs-*" + data_stream: + hidden: false + allow_custom_routing: false + template: + settings: + index: + number_of_replicas: 0 + lifecycle: + name: logs + codec: best_compression + routing: + allocation: + include: + _tier_preferences: data_hot + query: + default_field: + - message + mappings: + dynamic_templates: + - match_ip: + match: ip + match_mapping_type: string + mapping: + allow_custom_routing: false + template: + settings: + index: + number_of_replicas: 0 + lifecycle: + name: logs + codec: best_compression + routing: + allocation: + include: + _tier_preferences: data_hot + query: + default_field: + - message + mappings: + dynamic_templates: + - match_ip: + match: ip + match_mapping_type: string + mapping: + type: ip + - match_message: + match: message + match_mapping_type: string + mapping: + type: match_only_text + - strings_as_keyword: + match_mapping_type: string + mapping: + ignore_above: 1024 + type: keyword + priority: 125 so-logs-elastic_agent.apm_server: index_sorting: False index_template: