{
  "numeric_detection": true,
  "dynamic": true,
  "date_detection": false,
  "properties": {
    "fd.lport": {
      "ignore_malformed": true,
      "type": "short"
    },
    "fd.rport": {
      "ignore_malformed": true,
      "type": "short"
    },
    "fd.sip": {
      "ignore_malformed": true,
      "type": "ip"
    }
  }
}