From fb13fbe0ba39539965f95f0cb0c4be2fd48ea64b Mon Sep 17 00:00:00 2001
From: Martijn van Groningen <martijn.v.groningen@gmail.com>
Date: Fri, 27 Dec 2024 23:19:38 +0100
Subject: [PATCH] Properly map the rally.doc_size and rally.message_size fields
 in elastic/logs track (#716)

Co-authored-by: Oleksandr Kolomiiets <olkolomiiets@gmail.com>
(cherry picked from commit 76072a1d7095672760d8166b6cee51bd61a8b5ba)
---
 .../component/track-custom-mappings.json       | 18 ++++++++++--------
 1 file changed, 10 insertions(+), 8 deletions(-)

diff --git a/elastic/logs/templates/component/track-custom-mappings.json b/elastic/logs/templates/component/track-custom-mappings.json
index ecb920309..65ac8beef 100644
--- a/elastic/logs/templates/component/track-custom-mappings.json
+++ b/elastic/logs/templates/component/track-custom-mappings.json
@@ -1,14 +1,6 @@
 {
   "template" : {
     "mappings" : {
-      "runtime": {
-        "rally.doc_size": {
-          "type": "long"
-        },
-        "rally.message_size": {
-          "type": "long"
-        }
-      },
       "properties" : {
         "event": {
           "properties": {
@@ -21,6 +13,16 @@
               "format": "strict_date_optional_time"
             }
           }
+        },
+        "rally": {
+          "properties" : {
+            "doc_size": {
+              "type": "long"
+            },
+            "message_size": {
+              "type": "long"
+            }
+          }
         }
       }
     }