es-mapping-update

es-mapping-update.py

from elasticsearch import Elasticsearch
import json

es = Elasticsearch('http://localhost:9200')

q = {
    "query": {
        "match_all": {}
    }
}

indicators = es.search(index='indicators', query=q, size=1000)
indicators = [i.get('_source') for i in indicators['hits']['hits']]

with open('indicators_backup.jsonl','a') as f:
  for i in indicators:
    f.write(json.dumps(i)+'\n')

# get mapping and fix it
mapping = es.indices.get_mapping('indicators')
mapping['mapping'][...]['outputs'] = 'nested'

# delete the index
es.indices.delete('indicators')

# create the index

# put the updated mapping

for i in indicators:
  es.index('indicators', body=i)