Elasticsearch的动态模板日期配置

动态模板

 {
    "order": 0,
    "version": 50001,
    "template": "logstash-*",
    "settings": {
      "index": {
        "refresh_interval": "5s"
      }
    },
    "mappings": {
      "_default_": {
		"dynamic_date_formats":"date_optional_time||yyyy-MM-dd HH:mm:ss.SSS||epoch_millis",
        "dynamic_templates": [
          {
            "message_field": {
              "path_match": "message",
              "mapping": {
                "norms": false,
                "type": "text"
              },
              "match_mapping_type": "string"
            }
          },{
            "date_fields": {
              "mapping": {
                "type": "date",
				"format":"yyyy-MM-dd HH:mm:ss.SSS||epoch_second"
              },
              "match_mapping_type": "date",
              "match": "*"
            }
          },
          {
            "string_fields": {
              "mapping": {
                "norms": false,
                "type": "text",
                "fields": {
                  "keyword": {
                    "type": "keyword"
                  }
                }
              },
              "match_mapping_type": "string",
              "match": "*"
            }
          }
        ],
        "_all": {
          "norms": false,
          "enabled": true
        },
        "properties": {
          "@timestamp": {
            "include_in_all": false,
            "type": "date"
          },
          "geoip": {
            "dynamic": true,
            "properties": {
              "ip": {
                "type": "ip"
              },
              "latitude": {
                "type": "half_float"
              },
              "location": {
                "type": "geo_point"
              },
              "longitude": {
                "type": "half_float"
              }
            }
          },
          "@version": {
            "include_in_all": false,
            "type": "keyword"
          }
        }
      }
    },
    "aliases": {}
  }

接收的数据中如果是dynamic_date_formats所指定的格式，则会转化为date类型存储。
format则是会格式化es存储的date字段。从kibana中查询出的格式就是这个格式了。