Specify Index Parameters

You can to specify the parameters for the writers rather than using the default values using the CCP Management user interface.

1. Edit your sensor by clicking (the edit button) next your sensor in the Management Module.
2. Click the Advanced button next to Save and Cancel.
   The Management Module expands the panel to display the Advanced fields.

   Management Module Advanced Panel

   
   
   

3. Enter index configuration information for your sensor.
4. Click the Raw JSON field and set the alert field to "type": "nested":

   },
    "alert": {
    "type": "nested"
   }

   If this field is not set, Elasticsearch can throw an error and the field will not be queryable.
5. Click Save to save your changes and push your configuration to ZooKeeper.