Create custom analyzer in index template

Elastic Stack Elasticsearch
1

Hi All,

I am using Elastic as a logging system, and one of the optimizations I would like to make is changing the 'analyzer' (https://www.elastic.co/guide/en/elasticsearch/reference/current/analysis-analyzers.html) for my 'host' field.

I would basically want the 'keyword' analyzer but to be case insensitive (lowercased, might be ok).

I suspect I'd need to write a 'custom' analyzer but I really have no idea how to go about this - is anyone able to help?

Thanks
(elastic 6.4.2)

2

For anyone interested my full completed example is here: Changing the analyzer type fields are no longer aggregatable

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.