Is it possible to modify the default watch history mapping?

Elastic Stack Elasticsearch
1

Would it be viable to modify watch history mapping? (primarily to enable payload logging to allow for search. I am really just looking for hits.total property). Would the best approach be to use logging action and log the value?

Thanks
-J

2

Hi Jyeh,

Please read the following thread: Customize watch and/or watch_history index template

In short, no.. it's not possible to change the mapping as it can cause mapping conflicts between different executions.

3

Hi Jyeh,

Depending on what you're doing, you might also be able to use the indexing action to store the relevant results in another index where you can control the mappings.

Thanks,
Steve

4

Thanks, the other thread captured what I was asking more clearly.
I will explore the indexing/logging action options as there are no other way to modify the mapping currently.