Custom mapping per index

Graylog Central (peer support)
1

Hi

my current setup is that we have a two “types” of indices, data that is stored on a non encrypted fs and the other is encrypted.

We did this by creating adding an elasticnode to the cluster and by using allocatio awareness (like the hot,warm,cold example at es)

by checking https://www.graylog.org/post/back-to-basics-using-a-hot-warm-elasticsearch-cluster

it seems possbile to define a custom mapping for the “default” index ; is it possible to create a set of default mappings based on the index name?

2

yes - you can create a custom mapping for every index. Just adjust the template usage. As you define for what indices this is with the template code:

{
  "template": "second_*",
  "settings": {
    "index": {
      "routing": {
        "allocation": {
          "require": {
            "boxtype": "hot"
          }
        }
      },
      "refresh_interval": "30s"
    }
  }
}

See the template above just adjust tha.