依靠运行时字段节省大量时间

#In this index template, we've defined two fields, 
#timestamp and response_code, which will be created 
#when we ingest the data. We've also defined a 
#dynamic runtime field mapping. Any other fields 
#will be runtime fields.
PUT _index_template/my_dynamic_index
{
  "index_patterns": [
    "my_dynamic_index-*"
    ],
    "template": {
      "mappings":{
        "dynamic": "runtime",
      "properties": {
        "timestamp": {
          "type": "date",
          "format": "yyyy-MM-dd"
        },
        "response_code": {
          "type": "integer"
        }
      }
      }
    }
}