How to tell what template an index was created from?

(Kevin Soucy) #1

We have the default "logstash*" template (that has string fields analyzed by default but creates the unanalyzed ".raw" fields) and a couple of custom templates that match indexes we create with specific names like "app1-" and "app2-". These custom templates have all string fields as unanalyzed by default (and thus no need to create ".raw" fields). All of these templates are of order "0". So, if we create a new index with naming convention like "app3-*", can anyone tell me which template will be invoked at creation time (since they are all the same order, but none match the index naming convention), or will none of them be invoked and some other ES defaults that you can't see via the template API be applied.

Appreciate any feedback.

(system) #2