{
   "test-index-syslog4": {
      "mappings": {
         "type-syslog": {
            "properties": {
               "@time_day": {
                  "type": "long"
               },
               "@time_day_of_week": {
                  "type": "long"
               },
               "@time_hour": {
                  "type": "long"
               },
               "@time_min": {
                  "type": "long"
               },
               "@time_month": {
                  "type": "long"
               },
               "@time_offset": {
                  "type": "string"
               },
               "@time_sec": {
                  "type": "long"
               },
               "@time_year": {
                  "type": "long"
               },
               "DstCity": {
                  "type": "string"
               },
               "DstCountry": {
                  "type": "string",
                  "index": "not_analyzed",
                  "doc_values": true,
                  "fielddata": {
                     "format": "doc_values"
                  }
               },
               "DstIP": {
                  "type": "ip",
                  "doc_values": true,
                  "fielddata": {
                     "format": "doc_values"
                  }
               },
               "DstIPstr": {
                  "type": "string",
                  "index": "not_analyzed"
               },
               "DstInterface": {
                  "type": "string"
               },
               "DstLongLat": {
                  "type": "string"
               },
               "DstPort": {
                  "type": "string",
                  "index": "not_analyzed",
                  "doc_values": true,
                  "fielddata": {
                     "format": "doc_values"
                  }
               },
               "DstState": {
                  "type": "string"
               },
               "EventID": {
                  "type": "string"
               },
               "EventReceivedTime": {
                  "type": "date",
                  "format": "yyyy-MM-dd HH:mm:ss"
               },
               "EventTime": {
                  "type": "date",
                  "format": "yyyy-MM-dd HH:mm:ss"
               },
               "GroupName": {
                  "type": "string"
               },
               "Hostname": {
                  "type": "string",
                  "index": "not_analyzed"
               },
               "InputType1": {
                  "type": "string"
               },
               "InputType2": {
                  "type": "string"
               },
               "InputType3": {
                  "type": "string"
               },
               "Message": {
                  "type": "string",
                  "index": "not_analyzed"
               },
               "MessageSourceAddress": {
                  "type": "string"
               },
               "Protocol": {
                  "type": "string"
               },
               "Severity": {
                  "type": "string"
               },
               "SeverityValue": {
                  "type": "long"
               },
               "SourceModuleName": {
                  "type": "string"
               },
               "SourceModuleType": {
                  "type": "string"
               },
               "SourceName": {
                  "type": "string"
               },
               "SrcCity": {
                  "type": "string"
               },
               "SrcCountry": {
                  "type": "string",
                  "index": "not_analyzed",
                  "doc_values": true,
                  "fielddata": {
                     "format": "doc_values"
                  }
               },
               "SrcIP": {
                  "type": "ip",
                  "doc_values": true,
                  "fielddata": {
                     "format": "doc_values"
                  }
               },
               "SrcIPstr": {
                  "type": "string",
                  "index": "not_analyzed"
               },
               "SrcInterface": {
                  "type": "string"
               },
               "SrcLongLat": {
                  "type": "string"
               },
               "SrcPort": {
                  "type": "string",
                  "index": "not_analyzed",
                  "doc_values": true,
                  "fielddata": {
                     "format": "doc_values"
                  }
               },
               "SrcState": {
                  "type": "string"
               },
               "SyslogFacility": {
                  "type": "string"
               },
               "SyslogFacilityValue": {
                  "type": "long"
               },
               "SyslogSeverity": {
                  "type": "string"
               },
               "SyslogSeverityValue": {
                  "type": "long"
               },
               "TunnelGroup": {
                  "type": "string"
               },
               "UserName": {
                  "type": "string"
               },
               "eventClass": {
                  "type": "string"
               },
               "ignoreFlag": {
                  "type": "string"
               }
            }
         }
      }
   }
}