PUT /_template/netflow
{
  "index_patterns": ["netflow*"],
  "settings": {
    "number_of_shards": 1
  },
  "mappings": {
    "properties": {
      "time": {
        "type": "date",
        "format": "yyyy-MM-dd HH:mm:ss.S"
      },
      "host": {
        "type": "ip"
      },
      "exporter": {
        "type": "ip"
      },
        "byte": {
        "type": "long"
      },
      "byte_download": {
        "type": "long"
      },
      "byte_dst": {
        "type": "long"
      },
      "byte_dst_in": {
        "type": "long"
      },
      "byte_dst_out": {
        "type": "long"
      },
      "byte_in": {
        "type": "long"
      },
      "byte_in_dst": {
        "type": "long"
      },
      "byte_in_src": {
        "type": "long"
      },
      "byte_init": {
        "type": "long"
      },
      "byte_out": {
        "type": "long"
      },
      "byte_out_dst": {
        "type": "long"
      },
      "byte_out_src": {
        "type": "long"
      },
      "byte_resp": {
        "type": "long"
      },
      "byte_src": {
        "type": "long"
      },
      "byte_src_in": {
        "type": "long"
      },
      "byte_src_out": {
        "type": "long"
      },
      "byte_upload": {
        "type": "long"
      },
      "flow": {
        "type": "long"
      },
      "flow_download": {
        "type": "long"
      },
      "flow_dst": {
        "type": "long"
      },
      "flow_dst_in": {
        "type": "long"
      },
      "flow_dst_out": {
        "type": "long"
      },
      "flow_in": {
        "type": "long"
      },
      "flow_in_dst": {
        "type": "long"
      },
      "flow_in_src": {
        "type": "long"
      },
      "flow_init": {
        "type": "long"
      },
      "flow_out": {
        "type": "long"
      },
      "flow_out_dst": {
        "type": "long"
      },
      "flow_out_src": {
        "type": "long"
      },
      "flow_resp": {
        "type": "long"
      },
      "flow_src": {
        "type": "long"
      },
      "flow_src_in": {
        "type": "long"
      },
      "flow_src_out": {
        "type": "long"
      },
      "flow_upload": {
        "type": "long"
      },
      "pack": {
        "type": "long"
      },
      "pack_download": {
        "type": "long"
      },
      "pack_dst": {
        "type": "long"
      },
      "pack_dst_in": {
        "type": "long"
      },
      "pack_dst_out": {
        "type": "long"
      },
      "pack_in": {
        "type": "long"
      },
      "pack_in_dst": {
        "type": "long"
      },
      "pack_in_src": {
        "type": "long"
      },
      "pack_init": {
        "type": "long"
      },
      "pack_out": {
        "type": "long"
      },
      "pack_out_dst": {
        "type": "long"
      },
      "pack_out_src": {
        "type": "long"
      },
      "pack_resp": {
        "type": "long"
      },
      "pack_src": {
        "type": "long"
      },
      "pack_src_in": {
        "type": "long"
      },
      "pack_src_out": {
        "type": "long"
      },
      "pack_upload": {
        "type": "long"
      },
      "as": {
        "type": "integer"
      },
      "destination": {
        "type": "ip"
      },
      "id": {
        "type": "long"
      },
      "interface": {
        "type": "integer"
      },
      "is_source_initiator": {
        "type": "boolean"
      },
      "pattern": {
        "type": "integer"
      },
      "port": {
        "type": "integer"
      },
      "protocol": {
        "type": "integer"
      },
      "service": {
        "type": "integer"
      },
      "set": {
        "type": "integer"
      },
      "source": {
        "type": "ip"
      },
      "subnet": {
        "type": "integer"
      },
      "tos": {
        "type": "integer"
      },
      "user_id": {
        "type": "long"
      },
      "tenant_id": {
        "type": "integer"
      },
      "index_tag": {
        "type": "keyword"
      },
      "grain": {
        "type": "short"
      }
    }
  }
}