--- /dev/null
+{
+ "mappings": {
+ "message": {
+ "properties": {
+ "Payload": {
+ "type": "string"
+ },
+ "Logger": {
+ "index": "not_analyzed",
+ "type": "string"
+ },
+ "Hostname": {
+ "index": "not_analyzed",
+ "type": "string"
+ },
+ "Pid": {
+ "index": "not_analyzed",
+ "type": "long"
+ },
+ "Severity": {
+ "index": "not_analyzed",
+ "type": "long"
+ },
+ "Type": {
+ "index": "not_analyzed",
+ "type": "string"
+ },
+ "severity_label": {
+ "index": "not_analyzed",
+ "type": "string"
+ },
+ "environment_label": {
+ "index": "not_analyzed",
+ "type": "string"
+ },
+ "region": {
+ "index": "not_analyzed",
+ "type": "string"
+ },
+ "action": {
+ "index": "not_analyzed",
+ "type": "string"
+ },
+ "event_type": {
+ "index": "not_analyzed",
+ "type": "string"
+ },
+ "outcome": {
+ "index": "not_analyzed",
+ "type": "string"
+ },
+ "notification_type": {
+ "index": "not_analyzed",
+ "type": "string"
+ }
+ }
+ }
+ },
+ "template": "audit-*"
+}