Set options for _index, _id, _type, _score similar with the ones set …

…by Kibana (#3284)
elastic · Jan 5, 2017 · 1785b47 · 1785b47
1 parent 8b87995
commit 1785b47
Showing 1 changed file with 24 additions and 16 deletions.
diff --git a/libbeat/scripts/generate_index_pattern.py b/libbeat/scripts/generate_index_pattern.py
@@ -31,7 +31,9 @@ def fields_to_json(section, path, output):
             field_to_json(field, newpath, output)
 
 
-def field_to_json(desc, path, output):
+def field_to_json(desc, path, output,
+                  indexed=True, analyzed=False, doc_values=True,
+                  searchable=True, aggregatable=True):
 
     global unique_fields
 
@@ -45,11 +47,11 @@ def field_to_json(desc, path, output):
         "name": path,
         "count": 0,
         "scripted": False,
-        "indexed": True,
-        "analyzed": False,
-        "doc_values": True,
-        "searchable": True,
-        "aggregatable": True,
+        "indexed": indexed,
+        "analyzed": analyzed,
+        "doc_values": doc_values,
+        "searchable": searchable,
+        "aggregatable": aggregatable,
     }
     # find the kibana types based on the field type
     if "type" in desc:
@@ -93,17 +95,23 @@ def fields_to_index_pattern(args, input):
     for k, section in enumerate(docs["fields"]):
         fields_to_json(section, "", output)
 
-    # add special fields
-    special_fields = {
-        "fields": [
-            {"name": "_index", "type": "text"},
-            {"name": "_id", "type": "text"},
-            {"name": "_type", "type": "text"},
-            {"name": "_score", "type": "integer"}
-        ],
-    }
+    # add meta fields
+
+    field_to_json({"name": "_id", "type": "keyword"}, "_id", output,
+                  indexed=False, analyzed=False, doc_values=False,
+                  searchable=False, aggregatable=False)
+
+    field_to_json({"name": "_type", "type": "keyword"}, "_type", output,
+                  indexed=False, analyzed=False, doc_values=False,
+                  searchable=True, aggregatable=True)
+
+    field_to_json({"name": "_index", "type": "keyword"}, "_index", output,
+                  indexed=False, analyzed=False, doc_values=False,
+                  searchable=False, aggregatable=False)
 
-    fields_to_json(special_fields, "", output)
+    field_to_json({"name": "_score", "type": "integer"}, "_score", output,
+                  indexed=False, analyzed=False, doc_values=False,
+                  searchable=False, aggregatable=False)
 
     output["fields"] = json.dumps(output["fields"])
     output["fieldFormatMap"] = json.dumps(output["fieldFormatMap"])