Graylog using ECS format index

A while back I wrote up some detail on custom mappings and changing existing indexes to match your desired field type… perhaps you can pull some detail out of there to help bend Graylog/ElasticSearch to your will?