Elasticsearch dynamic index

In Logstash's Elasticsearch output it's possible to define which index should the data be saved in.
For time-based data, it's possible to define a date pattern like logstash-%{+YYYY.MM.dd}.

When an index doesn't exist yet, Elasticsearch will create it.
But is it possible to define the mapping somehow?

I'd like something like this:
As soon as the index is created, a mapping should be added.

You do that through index templates.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.