I created a mapping template below
PUT /_template/eside_test1
{
"index_patterns" : ["eside-*"],
"order" : 0,
"version": 1,
"settings" : {
"number_of_shards" : "3",
"index": { "refresh_interval": "5s" },
"number_of_routing_shards": "18",
"mapping": {
"total_fields": {
"limit": "1000"
}
}
},
"mapping" : {
"eside" : {
"@timestamp": { "type": "date"},
"Timestamp": { "type": "date"},
"ServerIP": {
"type": "text",
"fields": { "raw": { "type": "keyword"}},
"null_value": "NULL"
},
"Operation Type": {
"type": "text",
"fields": { "raw": { "type": "keyword"}},
"null_value": "NULL"
},
"Source": {
"type": "text",
"fields": { "raw": { "type": "keyword"}},
"null_value": "NULL"
},
"ElapsedTime": {
"type": "integer",
"null_value": "NULL"
},
"TransactionID": {
"type": "text",
"fields": { "raw": { "type": "keyword"}},
"null_value": "NULL"
},
"Destination": {
"type": "text",
"fields": { "raw": { "type": "keyword"}},
"null_value": "NULL"
},
"Operation Name": {
"type": "text",
"fields": { "raw": { "type": "keyword"}},
"null_value": "NULL"
},
"Host": {
"type": "text",
"fields": { "raw": { "type": "keyword"}},
"null_value": "NULL"
},
"Environment": {
"type": "text",
"fields": { "raw": { "type": "keyword"}},
"null_value": "NULL"
},
"Payload": {
"type": "text",
"fields": { "raw": { "type": "keyword"}},
"null_value": "NULL"
},
"Log message": {
"type": "text",
"fields": { "raw": { "type": "keyword"}},
"null_value": "NULL"
},
"source": {
"type": "text",
"fields": { "raw": { "type": "keyword"}},
"null_value": "NULL"
},
"host": {
"type": "text",
"fields": { "raw": { "type": "keyword"}},
"null_value": "NULL"
}
}
},
"aliases": {}
}
Then after checking this command
GET /_template/eside_test1
It gives me
{
"eside_test1": {
"order": 0,
"version": 1,
"index_patterns": [
"eside-*"
],
"settings": {
"index": {
"mapping": {
"total_fields": {
"limit": "1000"
}
},
"refresh_interval": "5s",
"number_of_routing_shards": "18",
"number_of_shards": "3"
}
},
"mappings": {},
"aliases": {}
}
}
No fields were mapped. Can anyone tell me whats wrong with my template?