In the default templates, specify geoip.postal_code to be type 'keywo…

…rd', to avoid incorrectly autodetecting as type 'date'.
logstash-plugins · Jul 5, 2018 · cce3abe · cce3abe
1 parent 6017c26
commit cce3abe
Show file tree

Hide file tree

Showing 4 changed files with 8 additions and 4 deletions.
diff --git a/lib/logstash/outputs/elasticsearch/elasticsearch-template-es2x.json b/lib/logstash/outputs/elasticsearch/elasticsearch-template-es2x.json
@@ -86,7 +86,8 @@
             "ip": { "type": "ip", "doc_values" : true },
             "location" : { "type" : "geo_point", "doc_values" : true },
             "latitude" : { "type" : "float", "doc_values" : true },
-            "longitude" : { "type" : "float", "doc_values" : true }
+            "longitude" : { "type" : "float", "doc_values" : true },
+            "postal_code" : { "type" : "string", "not_analyzed" : true }
           }
         }
       }

diff --git a/lib/logstash/outputs/elasticsearch/elasticsearch-template-es5x.json b/lib/logstash/outputs/elasticsearch/elasticsearch-template-es5x.json
@@ -37,7 +37,8 @@
             "ip": { "type": "ip" },
             "location" : { "type" : "geo_point" },
             "latitude" : { "type" : "half_float" },
-            "longitude" : { "type" : "half_float" }
+            "longitude" : { "type" : "half_float" },
+            "postal_code" : { "type" : "keyword" }
           }
         }
       }

diff --git a/lib/logstash/outputs/elasticsearch/elasticsearch-template-es6x.json b/lib/logstash/outputs/elasticsearch/elasticsearch-template-es6x.json
@@ -36,7 +36,8 @@
             "ip": { "type": "ip" },
             "location" : { "type" : "geo_point" },
             "latitude" : { "type" : "half_float" },
-            "longitude" : { "type" : "half_float" }
+            "longitude" : { "type" : "half_float" },
+            "postal_code" : { "type" : "keyword" }
           }
         }
       }

diff --git a/lib/logstash/outputs/elasticsearch/elasticsearch-template-es7x.json b/lib/logstash/outputs/elasticsearch/elasticsearch-template-es7x.json
@@ -37,7 +37,8 @@
             "ip": { "type": "ip" },
             "location" : { "type" : "geo_point" },
             "latitude" : { "type" : "half_float" },
-            "longitude" : { "type" : "half_float" }
+            "longitude" : { "type" : "half_float" },
+            "postal_code" : { "type" : "keyword" }
           }
         }
       }