{
  "logstash_netflow9" : {
    "order" : 0,
    "template" : "logstash_netflow9-*",
    "settings" : {
      "index" : {
        "refresh_interval" : "5s"
      }
    },
    "mappings" : {
      "_default_" : {
        "_all" : {
          "enabled" : false
        },
        "properties" : {
          "netflow" : {
            "dynamic" : true,
            "type" : "object",
            "properties" : {
              "dst_as" : {
                "index" : "analyzed",
                "type" : "integer"
              },
              "in_pkts" : {
                "index" : "analyzed",
                "type" : "long"
              },
              "first_switched" : {
                "index" : "not_analyzed",
                "type" : "date"
              },
              "ipv4_next_hop" : {
                "index" : "analyzed",
                "type" : "ip"
              },
              "l4_src_port" : {
                "index" : "analyzed",
                "type" : "long"
              },
              "sampling_algorithm" : {
                "index" : "not_analyzed",
                "type" : "integer"
              },
              "in_bytes" : {
                "index" : "analyzed",
                "type" : "long"
              },
              "protocol" : {
                "index" : "analyzed",
                "type" : "integer"
              },
              "tcp_flags" : {
                "index" : "analyzed",
                "type" : "integer"
              },
              "l4_dst_port" : {
                "index" : "analyzed",
                "type" : "long"
              },
              "src_as" : {
                "index" : "analyzed",
                "type" : "integer"
              },
              "output_snmp" : {
                "index" : "not_analyzed",
                "type" : "long"
              },
              "dst_mask" : {
                "index" : "analyzed",
                "type" : "integer"
              },
              "ipv4_dst_addr" : {
                "index" : "analyzed",
                "type" : "ip"
              },
              "src_tos" : {
                "index" : "analyzed",
                "type" : "integer"
              },
              "src_mask" : {
                "index" : "analyzed",
                "type" : "integer"
              },
              "version" : {
                "index" : "analyzed",
                "type" : "integer"
              },
              "flow_seq_num" : {
                "index" : "not_analyzed",
                "type" : "long"
              },
              "flow_records" : {
                "index" : "not_analyzed",
                "type" : "integer"
              },
              "ipv4_src_addr" : {
                "index" : "analyzed",
                "type" : "ip"
              },
              "engine_type" : {
                "index" : "not_analyzed",
                "type" : "integer"
              },
              "engine_id" : {
                "index" : "not_analyzed",
                "type" : "integer"
              },
              "input_snmp" : {
                "index" : "not_analyzed",
                "type" : "long"
              },
              "last_switched" : {
                "index" : "not_analyzed",
                "type" : "date"
              },
              "sampling_interval" : {
                "index" : "not_analyzed",
                "type" : "integer"
              }
            }
          },
          "@timestamp" : {
            "index" : "analyzed",
            "type" : "date"
          },
          "@version" : {
            "index" : "analyzed",
            "type" : "integer"
          }
        }
      }
    },
    "aliases" : { }
  }
}