{ "template": { "mappings": { "_meta": { "version": "1.0.0", "catalog": "observability", "type": "logs", "component": "aws_cloudfront" }, "properties": { "aws": { "properties": { "cloudfront": { "properties": { "c-ip": { "type": "ip" }, "geo_location": { "type": "geo_point" }, "geo_iso_code": { "type": "keyword" }, "geo_country": { "type": "keyword" }, "geo_city": { "type": "keyword" }, "ua_browser": { "type": "keyword" }, "ua_browser_version": { "type": "keyword" }, "ua_os": { "type": "keyword" }, "ua_os_version": { "type": "keyword" }, "ua_device": { "type": "keyword" }, "ua_category": { "type": "keyword" }, "c-port": { "type": "keyword" }, "cs-cookie": { "type": "text" }, "cs-host": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } }, "cs-referer": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } }, "cs-user-agent": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } }, "cs-bytes": { "type": "long" }, "cs-method": { "type": "keyword" }, "cs-protocol": { "type": "keyword" }, "cs-protocol-version": { "type": "keyword" }, "cs-uri-query": { "type": "text" }, "cs-uri-stem": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } }, "fle-encrypted-fields": { "type": "text" }, "fle-status": { "type": "keyword" }, "sc-bytes": { "type": "long" }, "sc-content-len": { "type": "long" }, "sc-content-type": { "type": "keyword" }, "sc-range-end": { "type": "long" }, "sc-range-start": { "type": "long" }, "sc-status": { "type": "keyword" }, "ssl-cipher": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } }, "ssl-protocol": { "type": "keyword" }, "time-taken": { "type": "float" }, "time-to-first-byte": { "type": "float" }, "x-edge-detailed-result-type": { "type": "keyword" }, "x-edge-location": { "type": "keyword" }, "x-edge-request-id": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } }, "x-edge-result-type": { "type": "keyword" }, "x-edge-response-result-type": { "type": "keyword" }, "x-forwarded-for": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } }, "x-host-header": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } } } } } } } } } }