Template Index Routing

[triggert]

Is it possible to define the index.routing.allocation.require.box_type in the graylog-internal template? Changes to the template are not holding so each new indice has to be updated manually.

Referenced from the the Elasticsearch hot warm architecture for ES version 2.x.

[jochen]

This should be possible with a custom index template: http://docs.graylog.org/en/2.2/pages/configuration/elasticsearch.html#custom-index-mappings

[triggert]

Thanks - based on that link, would this be the correct graylog-custom-mapping.json?

{
  "template": "graylog_*",
  "mappings" : {
    "settings" : {
      "properties" : {
        "index": {
          "routing": {
            "allocation": {
              "require": {
                "box_type": "hot"
              }
            }
          }
        }
      }
    }
  }
}

[jochen]

@triggert

would this be the correct graylog-custom-mapping.json?

No. Index settings must not be listed within the mappings dictionary.

See Index Templates | Elasticsearch Guide [2.4] | Elastic for details.