es 模板

{    
        "template": "log*",
        "order":10,
        "settings": {
          "index":{
            "refresh_interval" :"30s",
            "number_of_shards": "6",
            "number_of_replicas": "1",
            "translog.flush_threshold_size": "1024mb",
            "translog.durability": "async"
          }
        },
        "mappings" :{
            "logs" :{
                "properties": {
                    "Date": {
                        "type": "date"
                    },
                    "Level": {
                        "type": "keyword"
                    },
                    "Class": {
                        "type": "keyword"
                    }
                }
            }
        }
}

 

{   
        "template": "live*",
        "order":0,
        "settings": {
          "index":{
            "refresh_interval" :"30s",
            "number_of_shards": "6",
            "number_of_replicas": "1",
            "translog.flush_threshold_size": "1024mb",
            "translog.durability": "async"
          }
        },
        "mappings" :{
            "logs" :{
                "properties": {
                    "@timestamp": {
                        "type": "date"
                    },
                    "Date": {
                        "type": "text",
                        "fields": {
                            "keyword": {
                                "type": "keyword",
                                 "ignore_above": 256
                            }
                        }
                    },
                    "Level": {
                        "type": "keyword",
                        "fields": {
                            "keyword": {
                                "type": "keyword",
                                 "ignore_above": 256
                            }
                        }
                    },
                    "Thread": {
                        "type": "text",
                        "fields": {
                          "keyword": {
                            "type": "keyword",
                            "ignore_above": 256
                          }
                        }
                    },
                    "RequestId": {
                        "type": "text",
                        "fields": {
                          "keyword": {
                            "type": "keyword",
                            "ignore_above": 256
                          }
                        }
                    },
                    "Class": {
                        "type": "keyword",
                        "fields": {
                          "keyword": {
                            "type": "keyword",
                            "ignore_above": 256
                          }
                        }
                    },
                    "msg": {
                        "type": "text",
                        "fields": {
                            "keyword": {
                                "type": "keyword",
                                 "ignore_above": 256
                            }
                        }
                    }

                }
            }
        }
}

 

修改版本
{
    "order": 9,
    "template": "live*",
    "settings": {
      "index": {
        "refresh_interval": "30s",
        "number_of_shards": "6",
        "translog": {
          "flush_threshold_size": "1024mb",
          "durability": "async"
        },
        "number_of_replicas": "1"
      }
    },
    "mappings": {
      "live-front": {-----------》这里的值不是随便写的。这里写成你的type的值
        "properties": {
          "@timestamp": {
            "type": "date"
          },
          "Class": {
            "type": "text"
          },
          "Date": {
            "type": "date",
            "format": "yyyy-MM-dd HH:mm:ss.SSS"
          },
          "Level": {
            "type": "keyword"
          },
          "RequestId": {
            "type": "text"
          },
          "Thread": {
            "type": "text"
          },
          "beat": {
            "properties": {
              "hostname": {
                "type": "keyword"
              }
            }
          },
          "kafka": {
            "properties": {
              "consumer_group": {
                "type": "keyword"
              },
              "offset": {
                "type": "long"
              },
              "partition": {
                "type": "long"
              },
              "topic": {
                "type": "keyword"
              }
            }
          },
          "msg": {
            "type": "text"
          },
          "source": {
            "type": "keyword"
          },
          "type": {
            "type": "keyword"
          }
        }
      }
    }
  }