{
  "index_patterns": ["gochat-*"],
  "settings": {
    "number_of_shards": 3,
    "number_of_replicas": 1,
    "analysis": {
      "analyzer": {
        "gochat_log_analyzer": {
          "type": "custom",
          "tokenizer": "standard",
          "filter": ["lowercase", "stop", "word_delimiter"]
        }
      }
    },
    "index.lifecycle.name": "gochat-log-policy",
    "index.lifecycle.rollover_alias": "gochat"
  },
  "mappings": {
    "properties": {
      "timestamp": { "type": "date" },
      "level": { "type": "keyword" },
      "msg": { "type": "text", "analyzer": "gochat_log_analyzer" },
      "component": { "type": "keyword" },
      "error": { "type": "text" },
      "error_message": { "type": "text" },
      "environment": { "type": "keyword" },
      "kubernetes": {
        "properties": {
          "pod_name": { "type": "keyword" },
          "namespace_name": { "type": "keyword" },
          "container_name": { "type": "keyword" },
          "labels": { "type": "object", "dynamic": true }
        }
      }
    }
  }
}