In Logstash's Elasticsearch output it's possible to define which index should the data be saved in.
For time-based data, it's possible to define a date pattern like logstash-%{+YYYY.MM.dd}
.
When an index doesn't exist yet, Elasticsearch will create it.
But is it possible to define the mapping somehow?
I'd like something like this:
As soon as the index is created, a mapping should be added.