Modeling data in Elasticsearch

We have seen the structure of the final record after enriching the data. That should help us model the data in Elasticsearch. Given that our data is time series data, we can apply some of the techniques mentioned in Chapter 9, Running the Elastic Stack in Production, to model the data:

• Defining an index template
• Understanding the mapping

Let's look at the index template that we will define.

Defining an index template

Since we are going to be storing time series data that is immutable, we do not want to create one big monolithic index. We'll use the techniques discussed in the Modeling time series data section in Chapter 9, Running the Elastic Stack in Production.

The source code of...