Learning Elastic Stack 6.0

Understanding the mapping

The mapping that we defined in the index template contains all the fields that will be present in the denormalized record after lookup. A few things to notice in the index template mapping are as follows:

• All the fields that contain text type of data are stored as the keyword type; additionally, they are stored as text in an analyzed field. For an example, please have a look at the customer field.
• The latitude and longitude fields that we had in the enriched data are now mapped to a geo_point type of field with the field name as location.

At this point, we have defined an index template that will trigger the creation of an index with the mapping we defined in the template.