If I have a property which is the same across multiple document types in an index, can I define that property more globally?
Example: If I have a field "id_orig.h" which is type IP, can I save on template space by defining it once?
Example config:
{
"template" : "global*",
"settings" : {
"number_of_shards": 5
},
"mappings" : {
"global-alpha" : {
"_source" : { "enabled" : true },
"_all" : {"enabled" : false },
"properties" : {
"ts" : { "type": "date", "format": "epoch_millis" },
"uid" : { "type": "text" },
"id.orig_h" : { "type": "ip" },
"mac" : { "type": "keyword" }
}
},
"global-bravo" : {
"_source" : { "enabled" : true },
"_all" : {"enabled" : false },
"properties" : {
"ts" : { "type": "date", "format": "epoch_millis" },
"uid" : { "type": "text" },
"id.orig_h" : { "type": "ip" },
"proto" : { "type": "keyword" }
}
}
}
}