{
  "properties": {
    "@timestamp": {
      "type": "date"
    },
    "service_id": {
      "type": "keyword"
    },
    "message": {
      "type": "keyword"
    }
  }
}