{ ".ds-logs-elastic_agent-default-000001" : { "mappings" : { "_data_stream_timestamp" : { "enabled" : true }, "dynamic_templates" : [ { "strings_as_keyword" : { "match_mapping_type" : "string", "mapping" : { "ignore_above" : 1024, "type" : "keyword" } } } ], "date_detection" : false, "properties" : { "@timestamp" : { "type" : "date" }, "agent" : { "properties" : { "ephemeral_id" : { "type" : "keyword", "ignore_above" : 1024 }, "hostname" : { "type" : "keyword", "ignore_above" : 1024 }, "id" : { "type" : "keyword", "ignore_above" : 1024 }, "name" : { "type" : "keyword", "ignore_above" : 1024 }, "type" : { "type" : "keyword", "ignore_above" : 1024 }, "version" : { "type" : "keyword", "ignore_above" : 1024 } } }, "data_stream" : { "properties" : { "dataset" : { "type" : "constant_keyword", "value" : "elastic_agent" }, "namespace" : { "type" : "constant_keyword", "value" : "default" }, "type" : { "type" : "constant_keyword", "value" : "logs" } } }, "ecs" : { "properties" : { "version" : { "type" : "keyword", "ignore_above" : 1024 } } }, "elastic_agent" : { "properties" : { "id" : { "type" : "keyword", "ignore_above" : 1024 }, "snapshot" : { "type" : "boolean" }, "version" : { "type" : "keyword", "ignore_above" : 1024 } } }, "event" : { "properties" : { "dataset" : { "type" : "keyword", "ignore_above" : 1024 } } }, "host" : { "properties" : { "architecture" : { "type" : "keyword", "ignore_above" : 1024 }, "hostname" : { "type" : "keyword", "ignore_above" : 1024 }, "id" : { "type" : "keyword", "ignore_above" : 1024 }, "ip" : { "type" : "ip" }, "mac" : { "type" : "keyword", "ignore_above" : 1024 }, "name" : { "type" : "keyword", "ignore_above" : 1024 }, "os" : { "properties" : { "build" : { "type" : "keyword", "ignore_above" : 1024 }, "family" : { "type" : "keyword", "ignore_above" : 1024 }, "kernel" : { "type" : "keyword", "ignore_above" : 1024 }, "name" : { "type" : "keyword", "ignore_above" : 1024 }, "platform" : { "type" : "keyword", "ignore_above" : 1024 }, "version" : { "type" : "keyword", "ignore_above" : 1024 } } } } }, "input" : { "properties" : { "type" : { "type" : "keyword", "ignore_above" : 1024 } } }, "log" : { "properties" : { "file" : { "properties" : { "path" : { "type" : "keyword", "ignore_above" : 1024 } } }, "level" : { "type" : "keyword", "ignore_above" : 1024 }, "logger" : { "type" : "keyword", "ignore_above" : 1024 }, "offset" : { "type" : "long" }, "origin" : { "properties" : { "file" : { "properties" : { "line" : { "type" : "long" }, "name" : { "type" : "keyword", "ignore_above" : 1024 } } } } } } }, "message" : { "type" : "text" } } } } }