Index template and JVM usage

Elastic Stack Elasticsearch
1

Hi,

We have a number of indexs for devices with limited static fields, ie a firewall. (assuming an upgrade of the device does not add more fields)

I typically use the ECS as the template for the indexs. Would there be any performance gains to JVM usage if i created my own templates with the required fields?

Thanks

2

Static mappings are more efficient, yes. Whether that makes a noticeable gain though, you'd want to test with your cluster and data.