Ok for mappings this is what I got,
"testing1234" : {
"mappings" : {
"OldLog" : { },
"event" : {
"properties" : {
"category" : {
"type" : "string",
"index" : "not_analyzed"
},
"component" : {
"type" : "string",
"index" : "not_analyzed"
},
"compressed" : {
"type" : "string",
"index" : "not_analyzed"
},
"event_category" : {
"type" : "string",
"index" : "not_analyzed"
},
"event_source" : {
"type" : "string",
"index" : "not_analyzed"
},
"host" : {
"type" : "ip"
},
"isSynced" : {
"type" : "string",
"index" : "not_analyzed"
},
"isValidFormat" : {
"type" : "string",
"index" : "not_analyzed"
},
"logType" : {
"type" : "string",
"index" : "not_analyzed"
},
"number_of_hops" : {
"type" : "short"
},
"payload_size" : {
"type" : "string",
"index" : "not_analyzed"
},
"port" : {
"type" : "string",
"index" : "not_analyzed"
},
"priority" : {
"type" : "string",
"index" : "not_analyzed"
},
"route_string_1" : {
"type" : "string",
"index" : "not_analyzed"
},
"route_string_2" : {
"type" : "string",
"index" : "not_analyzed"
},
"route_string_3" : {
"type" : "string",
"index" : "not_analyzed"
},
"sourceType" : {
"type" : "string",
"index" : "not_analyzed"
},
"source_dest" : {
"type" : "string",
"index" : "not_analyzed"
},
"syslog5424_app" : {
"type" : "string",
"index" : "not_analyzed"
},
"syslog5424_host" : {
"type" : "string",
"index" : "not_analyzed"
},
"syslog5424_msgid" : {
"type" : "string",
"index" : "not_analyzed"
},
"syslog5424_pri" : {
"type" : "string",
"index" : "not_analyzed"
},
"syslog5424_proc" : {
"type" : "string",
"index" : "not_analyzed"
},
"syslog5424_ts" : {
"type" : "string",
"index" : "not_analyzed"
},
"syslog5424_ver" : {
"type" : "string",
"index" : "not_analyzed"
},
"syslog_facility" : {
"type" : "string",
"index" : "not_analyzed"
},
"syslog_facility_code" : {
"type" : "string",
"index" : "not_analyzed"
},
"syslog_severity" : {
"type" : "string",
"index" : "not_analyzed"
},
"syslog_severity_code" : {
"type" : "string",
"index" : "not_analyzed"
},
"traceDestinationHost" : {
"type" : "string",
"index" : "not_analyzed"
},
"traceDestinationPort" : {
"type" : "short"
},
"traceSourceHost" : {
"type" : "string",
"index" : "not_analyzed"
},
"traceroute" : {
"properties" : {
"dest_ip" : {
"type" : "string",
"index" : "not_analyzed"
},
"dest_name" : {
"type" : "string",
"index" : "not_analyzed"
},
"probes" : {
"properties" : {
"ipaddr" : {
"type" : "ip"
},
"name" : {
"type" : "string",
"index" : "not_analyzed"
},
"rtt" : {
"type" : "double"
}
}
}
}
},
"tzKnown" : {
"type" : "string",
"index" : "not_analyzed"
}
}
}
}
}
}