Elasticsearch Using index templates & dynamic mappings
Enables faceted searches of logs using logstash.
If you don’t know logstash, you might want to take a quick tour.
I found it interesting that you can now parse events on a TCP socket.
What you want to add to logs, events, etc., for mapping purposes is entirely up to you.