From ea071ee4e46d2daedef638e77b396d61c28e0f30 Mon Sep 17 00:00:00 2001 From: "mergify[bot]" <37929162+mergify[bot]@users.noreply.github.com> Date: Tue, 21 Jan 2025 11:40:53 -0500 Subject: [PATCH] Add restrictions for synthetic `_source` (#1622) (#1641) * Add restrictions for synthetic * Fixes for Martijn's review * Remove note about synthetic _source not supported on TSDS (cherry picked from commit 42b052ff3fd22f5e6fd02de856d6fe1f8608aadc) Co-authored-by: David Kilfoyle <41695641+kilfoyle@users.noreply.github.com> --- .../ingest-management/data-streams.asciidoc | 22 +++++++++++-------- 1 file changed, 13 insertions(+), 9 deletions(-) diff --git a/docs/en/ingest-management/data-streams.asciidoc b/docs/en/ingest-management/data-streams.asciidoc index 84d05b932..a113548d1 100644 --- a/docs/en/ingest-management/data-streams.asciidoc +++ b/docs/en/ingest-management/data-streams.asciidoc @@ -937,6 +937,7 @@ Refer to <> to learn more. * link:{ref}/mapping-source-field.html#synthetic-source[Synthetic `_source`] These features can be enabled and disabled for {fleet}-managed data streams by using the index template API and a few key settings. +Note that in versions 8.17.0 and later, Synthetic `_source` requires an Enterprise license. NOTE: If you are already making use of `@custom` component templates for ingest or retention customization (as shown for example in <>), exercise care to ensure you don't overwrite your customizations when making these requests. @@ -1098,16 +1099,18 @@ For example, the following payload disables TSDS on `nginx.stubstatus`: [source,json] ---- PUT _component_template/@custom - { - "template": { - "mappings": { - "_source": { - "mode": "synthetic" + "settings": { + "index": { + "mapping": { + "source": { + "mode": "synthetic" + } } } } } + ---- [discrete] @@ -1117,11 +1120,12 @@ PUT _component_template/@custom [source,json] ---- PUT _component_template/@custom - { - "template": { - "mappings": { - "_source": {} + "settings": { + "index": { + "mapping": { + "source": {"mode": "stored"} + } } } }