{
  "numeric_detection": true,
  "dynamic": "true",
  "date_detection": true,
  "properties": {
    "flow.src_ip": {
      "ignore_malformed": true,
      "type": "ip"
    },
    "source_location": {
      "ignore_malformed": true,
      "ignore_z_value": true,
      "type": "geo_point"
    },
    "tcp.tcp_flags_tc": {
      "fields": {
        "keyword": {
          "type": "keyword"
        }
      },
      "type": "text"
    },
    "src_ip": {
      "ignore_malformed": true,
      "type": "ip"
    },
    "flow.dest_ip": {
      "ignore_malformed": true,
      "type": "ip"
    },
    "src_port": {
      "ignore_malformed": true,
      "fields": {
        "keyword": {
          "type": "keyword"
        }
      },
      "type": "short"
    },
    "flow.src_port": {
      "ignore_malformed": true,
      "fields": {
        "keyword": {
          "type": "keyword"
        }
      },
      "type": "short"
    },
    "flow.dest_port": {
      "ignore_malformed": true,
      "fields": {
        "keyword": {
          "type": "keyword"
        }
      },
      "type": "short"
    },
    "tcp.tcp_flags": {
      "fields": {
        "keyword": {
          "type": "keyword"
        }
      },
      "type": "text"
    },
    "dest_ip": {
      "ignore_malformed": true,
      "type": "ip"
    },
    "destination_location": {
      "ignore_malformed": true,
      "ignore_z_value": true,
      "type": "geo_point"
    },
    "dest_port": {
      "ignore_malformed": true,
      "fields": {
        "keyword": {
          "type": "keyword"
        }
      },
      "type": "short"
    },
    "tcp.tcp_flags_ts": {
      "fields": {
        "keyword": {
          "type": "keyword"
        }
      },
      "type": "text"
    }
  }
}