From 11a4c289a7d5712c7c09bcad54f464018aa6af57 Mon Sep 17 00:00:00 2001
From: Vitaliy Vasilenko <vitalvas@users.noreply.github.com>
Date: Wed, 18 Sep 2019 16:54:13 +0300
Subject: [PATCH] Fix template for support elasticsearch v7 #3041

---
 contrib/elastic/rspamd_template.json | 255 +++++++++++++--------------
 1 file changed, 125 insertions(+), 130 deletions(-)

diff --git a/contrib/elastic/rspamd_template.json b/contrib/elastic/rspamd_template.json
index 9119af4c7..94f54f1c9 100644
--- a/contrib/elastic/rspamd_template.json
+++ b/contrib/elastic/rspamd_template.json
@@ -1,143 +1,138 @@
 {
   "mappings": {
-    "_default_": {
-      "_all": {
-        "norms": false
-      },
-      "_meta": {
-        "version": "5.5.2"
-      },
-      "date_detection": false,
-      "dynamic_templates": [
-        {
-          "strings_as_keyword": {
-            "mapping": {
-              "ignore_above": 1024,
-              "type": "keyword"
-            },
-            "match_mapping_type": "string"
-          }
+    "_meta": {
+      "version": "5.5.2"
+    },
+    "date_detection": false,
+    "dynamic_templates": [
+      {
+        "strings_as_keyword": {
+          "mapping": {
+            "ignore_above": 1024,
+            "type": "keyword"
+          },
+          "match_mapping_type": "string"
         }
-      ],
-      "properties": {
-        "@timestamp": {
-          "type": "date"
-        },
-        "meta": {
-          "properties": {
-            "cloud": {
-              "properties": {
-                "availability_zone": {
-                  "ignore_above": 1024,
-                  "type": "keyword"
-                },
-                "instance_id": {
-                  "ignore_above": 1024,
-                  "type": "keyword"
-                },
-                "machine_type": {
-                  "ignore_above": 1024,
-                  "type": "keyword"
-                },
-                "project_id": {
-                  "ignore_above": 1024,
-                  "type": "keyword"
-                },
-                "provider": {
-                  "ignore_above": 1024,
-                  "type": "keyword"
-                },
-                "region": {
-                  "ignore_above": 1024,
-                  "type": "keyword"
-                }
+      }
+    ],
+    "properties": {
+      "@timestamp": {
+        "type": "date"
+      },
+      "meta": {
+        "properties": {
+          "cloud": {
+            "properties": {
+              "availability_zone": {
+                "ignore_above": 1024,
+                "type": "keyword"
+              },
+              "instance_id": {
+                "ignore_above": 1024,
+                "type": "keyword"
+              },
+              "machine_type": {
+                "ignore_above": 1024,
+                "type": "keyword"
+              },
+              "project_id": {
+                "ignore_above": 1024,
+                "type": "keyword"
+              },
+              "provider": {
+                "ignore_above": 1024,
+                "type": "keyword"
+              },
+              "region": {
+                "ignore_above": 1024,
+                "type": "keyword"
               }
             }
           }
-        },
-        "rspamd_meta": {
-          "properties": {
-            "action": {
-              "ignore_above": 1024,
-              "type": "keyword"
-            },
-            "direction": {
-              "ignore_above": 1024,
-              "type": "keyword"
-            },
-            "asn": {
-              "properties": {
-                "asn": {
-                  "type": "long"
-                },
-                "country_code": {
-                  "ignore_above": 1024,
-                  "type": "keyword"
-                },
-                "ipnet": {
-                  "ignore_above": 1024,
-                  "type": "keyword"
-                },
-                "registrant": {
-                  "ignore_above": 1024,
-                  "type": "keyword"
-                }
+        }
+      },
+      "rspamd_meta": {
+        "properties": {
+          "action": {
+            "ignore_above": 1024,
+            "type": "keyword"
+          },
+          "direction": {
+            "ignore_above": 1024,
+            "type": "keyword"
+          },
+          "asn": {
+            "properties": {
+              "asn": {
+                "type": "long"
+              },
+              "country_code": {
+                "ignore_above": 1024,
+                "type": "keyword"
+              },
+              "ipnet": {
+                "ignore_above": 1024,
+                "type": "keyword"
+              },
+              "registrant": {
+                "ignore_above": 1024,
+                "type": "keyword"
               }
-            },
-            "from": {
-              "ignore_above": 1024,
-              "type": "keyword"
-            },
-            "is_local": {
-              "type": "boolean"
-            },
-            "webmail": {
-              "type": "boolean"
-            },
-            "geoip": {
-              "properties": {
-                "city_name": {
-                  "ignore_above": 1024,
-                  "type": "keyword"
-                },
-                "continent_name": {
-                  "ignore_above": 1024,
-                  "type": "keyword"
-                },
-                "country_iso_code": {
-                  "ignore_above": 1024,
-                  "type": "keyword"
-                },
-                "location": {
-                  "type": "geo_point"
-                }
+            }
+          },
+          "from": {
+            "ignore_above": 1024,
+            "type": "keyword"
+          },
+          "is_local": {
+            "type": "boolean"
+          },
+          "webmail": {
+            "type": "boolean"
+          },
+          "geoip": {
+            "properties": {
+              "city_name": {
+                "ignore_above": 1024,
+                "type": "keyword"
+              },
+              "continent_name": {
+                "ignore_above": 1024,
+                "type": "keyword"
+              },
+              "country_iso_code": {
+                "ignore_above": 1024,
+                "type": "keyword"
+              },
+              "location": {
+                "type": "geo_point"
               }
-            },
-            "ip": {
-              "ignore_above": 1024,
-              "type": "keyword"
-            },
-            "qid": {
-              "ignore_above": 1024,
-              "type": "keyword"
-            },
-            "hostname": {
-              "ignore_above": 1024,
-              "type": "keyword"
-            },
-            "score": {
-              "type": "float"
-            },
-            "user": {
-              "ignore_above": 1024,
-              "type": "keyword"
             }
+          },
+          "ip": {
+            "ignore_above": 1024,
+            "type": "keyword"
+          },
+          "qid": {
+            "ignore_above": 1024,
+            "type": "keyword"
+          },
+          "hostname": {
+            "ignore_above": 1024,
+            "type": "keyword"
+          },
+          "score": {
+            "type": "float"
+          },
+          "user": {
+            "ignore_above": 1024,
+            "type": "keyword"
           }
-        },
-        "tags": {
-          "ignore_above": 1024,
-          "type": "keyword"
         }
+      },
+      "tags": {
+        "ignore_above": 1024,
+        "type": "keyword"
       }
     }
   },
@@ -146,5 +141,5 @@
     "index.mapping.total_fields.limit": 10000,
     "index.refresh_interval": "5s"
   },
-  "index_patterns" : ["rspamd-*"]
+  "index_patterns" : ["rspamd-*", "*-rspamd-*"]
 }
-- 
2.39.5