I am looking to define a template for 3 indexes:
clients-MM-DD-YYYY
servers-MM-DD-YYYY
ps-MM-DD-YYYY
But I can't apply the template to all three indexes without using the "*" wildcard, which I don't want to do since I have other indexes that I don't want the template to apply to (e.g. eventlogs, beats, etc.).
Is there any way to define multiple indexes in a template definition ... something like:
PUT _template/common_template
{
"order": 5,
"template": "clients-,servers-,ps-",
"settings": { "index": { "mapping": { "total_fields": { "limit": "1000" }, "ignore_malformed": "true" }, } },
"mappings": { "default": { "properties": { "@timestamp": { "type": "date" } } } }
}