From 35cb2b9be6859117cffde5e30412f16ad92e915b Mon Sep 17 00:00:00 2001
From: Robert Cowart <robacj@gmail.com>
Date: Mon, 25 Sep 2017 17:27:32 +0200
Subject: [PATCH] Updated index template to use best_compression

---
 logstash/templates/netflow.template.json | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/logstash/templates/netflow.template.json b/logstash/templates/netflow.template.json
index f6e0a4e..41ac123 100644
--- a/logstash/templates/netflow.template.json
+++ b/logstash/templates/netflow.template.json
@@ -6,7 +6,8 @@
         "index": {
             "number_of_shards": 2,
             "number_of_replicas": 1,
-            "refresh_interval": "5s"
+            "refresh_interval": "5s",
+            "codec": "best_compression"
         }
     },
     "mappings": {