{ "mappings": { "message": { "properties": { "event_type": { "index": "not_analyzed", "type": "string" }, "Payload": { "type": "string" }, "Logger": { "index": "not_analyzed", "type": "string" }, "programname": { "index": "not_analyzed", "type": "string" }, "Hostname": { "index": "not_analyzed", "type": "string" }, "hostname": { "index": "not_analyzed", "type": "string" }, "Pid": { "index": "not_analyzed", "type": "long" }, "Severity": { "index": "not_analyzed", "type": "long" }, "syslogfacility": { "index": "not_analyzed", "type": "long" }, "Type": { "index": "not_analyzed", "type": "string" }, "severity_label": { "index": "not_analyzed", "type": "string" }, "environment_label": { "index": "not_analyzed", "type": "string" }, "openstack_role": { "type": "string", "analyzer": "ost_roles" }, "openstack_region": { "index": "not_analyzed", "type": "string" }, "openstack_release": { "index": "not_analyzed", "type": "string" }, "deployment_id": { "index": "not_analyzed", "type": "string" }, "request_id": { "index": "not_analyzed", "type": "string" }, "tenant_id": { "index": "not_analyzed", "type": "string" }, "user_id": { "index": "not_analyzed", "type": "string" }, "launched_at": { "type": "date", "format": "dateOptionalTime" }, "created_at": { "type": "date", "format": "dateOptionalTime" } } } }, "settings": { "analysis": { "tokenizer": { "comma" : { "type": "pattern", "pattern": "," } }, "analyzer": { "ost_roles": { "type": "custom", "tokenizer": "comma", "filter": ["lowercase"] } } } }, "template": "notification-*" }