How to add _size mapping to index template in elasticsearch?

[Amirhossein_eidy]

Hi friends

I have installed size mapping plugin and I added it to Kibana meta fields too

I could successfully enable "_size" in Elasticsearch via bellow command and see the result in kibana

PUT logstash-2023-06-06
{
  "mappings": {
    "_size": {
      "enabled": true
    }
  }
} 

but I could just enable size field in a single upcoming index, how to enable _size mapping in all of my upcoming indices and index template?
should I add it in Kibana index template or elasticsearch?

[dadoonet (David Pilato)]

You need to create an index template which matches the index names you will create in the future.

[Amirhossein_eidy]

ok I know that
but how this must be added to template?
I don't know this is not a text or Boolean type

[dadoonet (David Pilato)]

Something like this should work I think:

PUT _index_template/logstash-size
{
  "index_patterns": ["logstash-*"],
  "template": {
    "mappings": {
      "_size": {
        "enabled": true
      }
    }
  },
  "priority": 500
}

[dadoonet (David Pilato)]

Note that this applies only to new indices.

[Amirhossein_eidy]

Thanks it worked
Is the document size by byte or kb?

[dadoonet (David Pilato)]

I believe this is in bytes but I'm not sure.