Index template and JVM usage


We have a number of indexs for devices with limited static fields, ie a firewall. (assuming an upgrade of the device does not add more fields)

I typically use the ECS as the template for the indexs. Would there be any performance gains to JVM usage if i created my own templates with the required fields?


Static mappings are more efficient, yes. Whether that makes a noticeable gain though, you'd want to test with your cluster and data.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.