No fields mapped after creating a mapping template


(Archelle Pagapulan) #1

I created a mapping template below

PUT /_template/eside_test1
{
    "index_patterns" : ["eside-*"],
    "order" : 0,
    "version": 1,
    "settings" : {
        "number_of_shards" : "3",
        "index": { "refresh_interval": "5s" },
        "number_of_routing_shards": "18",
        "mapping": {
            "total_fields": {
                "limit": "1000"
          }
        }
    },
    "mapping" : {
        "eside" : {
            "@timestamp": { "type": "date"},
            "Timestamp": { "type": "date"},
            "ServerIP": {
                "type": "text",
                "fields": { "raw": { "type": "keyword"}},
                "null_value": "NULL"
            },
           "Operation Type": {
                "type": "text",
                "fields": { "raw": { "type": "keyword"}},
                "null_value": "NULL"
            },
            "Source": {
                "type": "text",
                "fields": { "raw": { "type": "keyword"}},
                "null_value": "NULL"
            },
            "ElapsedTime": {
                "type": "integer",
                "null_value": "NULL"
            },
            "TransactionID": {
                "type": "text",
                "fields": { "raw": { "type": "keyword"}},
                "null_value": "NULL"
            },
            "Destination": {
                "type": "text",
                "fields": { "raw": { "type": "keyword"}},
                "null_value": "NULL"
            },
            "Operation Name": {
                "type": "text",
                "fields": { "raw": { "type": "keyword"}},
                "null_value": "NULL"
            },
            "Host": {
                "type": "text",
                "fields": { "raw": { "type": "keyword"}},
                "null_value": "NULL"
            },
            "Environment": {
                "type": "text",
                "fields": { "raw": { "type": "keyword"}},
                "null_value": "NULL"
            },
            "Payload": {
                "type": "text",
                "fields": { "raw": { "type": "keyword"}},
                "null_value": "NULL"
            },
            "Log message": {
                "type": "text",
                "fields": { "raw": { "type": "keyword"}},
                "null_value": "NULL"
            },
            "source": {
                "type": "text",
                "fields": { "raw": { "type": "keyword"}},
                "null_value": "NULL"
            },
            "host": {
                "type": "text",
                "fields": { "raw": { "type": "keyword"}},
                "null_value": "NULL"
            }
        }
    },
    "aliases": {}
}

Then after checking this command

GET /_template/eside_test1

It gives me

{
  "eside_test1": {
    "order": 0,
    "version": 1,
    "index_patterns": [
      "eside-*"
    ],
    "settings": {
      "index": {
        "mapping": {
          "total_fields": {
            "limit": "1000"
          }
        },
        "refresh_interval": "5s",
        "number_of_routing_shards": "18",
        "number_of_shards": "3"
      }
    },
    "mappings": {},
    "aliases": {}
  }
}

No fields were mapped. Can anyone tell me whats wrong with my template?


(Mark Walkom) #2

What version are you running?


(system) #3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.