PUT "ignore_malformed" on index_template

Elastic Stack Elasticsearch
1

Hi,

Is it possible to insert the parameter "ignore_malformed" on a template by a PUT?

My actual config is:

GET _template/http-access

{
  "http-access" : {
    "order" : 0,
    "version" : 60001,
    "index_patterns" : [
      "http-access-*"

...

        "client_ip" : {
          "type" : "ip"
        },
        "corpname" : {
          "type" : "keyword"
        },
        "category" : {
          "type" : "keyword"
        }
      }
    },
    "aliases" : { }
  }
}

So i would like to insert: "ignore_malformed": true on client_ip:

"client_ip" : {
 "type" : "ip"
 "ignore_malformed": true

Thank you.

2

That should work - ignore_malformed | Elasticsearch Guide [8.0] | Elastic. Does it not?

3

Hi Mark,

i use ILM system, so there isn't only a index. For this reason i would like to know if it correct to insert the parameter at template level.

Thank you.

4

Yes, it can be applied in a template.

5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.