# Set up custom mapping

**URL:** <https://discuss.elastic.co/t/set-up-custom-mapping/122227>\
**Category:** Elasticsearch\
**Created:** [March 2, 2018, 10:28am UTC](https://discuss.elastic.co/t/set-up-custom-mapping/122227 "2018-03-02T10:28:22Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![Win](https://avatars.discourse-cdn.com/v4/letter/w/65b543/32.png) [@Win](https://discuss.elastic.co/u/Win)\
**Post date:** [March 2, 2018, 10:28am UTC](https://discuss.elastic.co/t/set-up-custom-mapping/122227/1 "2018-03-02T10:28:23Z")

</div>

Hi there.

I did not find an existing topic about this, so...

The log to be analyzed looks like this:

2012-01-01|SEVERE|System error|NullPointerException|user1  
2012-01-01|INFO||Logged In|user2  
2012-01-01|SEVERE|System error|AuthenticationException|user3  
...  
and so on..

What kind of command should I make in console to make proper mappings for this file?  
Any other things to be notified? The JSON conversion for the file is out of question.

Br  
Wins

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [March 2, 2018, 3:29pm UTC](https://discuss.elastic.co/t/set-up-custom-mapping/122227/2 "2018-03-02T15:29:43Z")

</div>

> The JSON conversion for the file is out of question.

Why?

---

<div class="post-metadata">

**Author:** ![Win](https://avatars.discourse-cdn.com/v4/letter/w/65b543/32.png) [@Win](https://discuss.elastic.co/u/Win)\
**Post date:** [March 5, 2018, 4:55am UTC](https://discuss.elastic.co/t/set-up-custom-mapping/122227/3 "2018-03-05T04:55:01Z")

</div>

Cause I say so 🙂. It’s the last option.

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [March 5, 2018, 7:44am UTC](https://discuss.elastic.co/t/set-up-custom-mapping/122227/4 "2018-03-05T07:44:07Z")

</div>

That's not a valid answer.  
Why not using ingest node to transform text as structured document or logstash ?

---

<div class="post-metadata">

**Author:** ![Win](https://avatars.discourse-cdn.com/v4/letter/w/65b543/32.png) [@Win](https://discuss.elastic.co/u/Win)\
**Post date:** [March 6, 2018, 7:35am UTC](https://discuss.elastic.co/t/set-up-custom-mapping/122227/5 "2018-03-06T07:35:07Z")

</div>

So there is no way to set up custom mapping command for this kind of log file? Just say yes or no, thanks.

Wins

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 3, 2018, 7:35am UTC](https://discuss.elastic.co/t/set-up-custom-mapping/122227/6 "2018-04-03T07:35:12Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.