index_template.json

{
    "settings": {
        "number_of_replicas": 0
    },
    "mappings": {
        "properties": {
            "created_at": {
                "type": "date"
            },
            "endpoint": {
                "properties": {
                    "active_directory_distinguished_name": {
                        "type": "text"
                    },
                    "active_directory_hostname": {
                        "type": "text"
                    },
                    "domain": {
                        "type": "text"
                    },
                    "is_base_image": {
                        "type": "boolean"
                    },
                    "isolation": {
                        "properties": {
                            "status": {
                                "type": "boolean"
                            }
                        }
                    },
                    "policy": {
                        "properties": {
                            "id": {
                                "type": "keyword",
                                "ignore_above": 256
                            }
                        }
                    },
                    "sensor": {
                        "properties": {
                            "persistence": {
                                "type": "boolean"
                            },
                            "status": {
                                "type": "object"
                            }
                        }
                    },
                    "upgrade": {
                        "type": "object"
                    }
                }
            },
            "host": {
                "properties": {
                    "hostname": {
                        "type": "text"
                    },
                    "ip": {
                        "type": "keyword",
                        "ignore_above": 256
                    },
                    "mac_address": {
                        "type": "text"
                    },
                    "name": {
                        "type": "text"
                    },
                    "os": {
                        "properties": {
                            "full": {
                                "type": "text"
                            },
                            "name": {
                                "type": "text"
                            }
                        }
                    }
                }
            },
            "machine_id": {
                "type": "keyword",
                "index": true
            }
        }
    }
}