title: can i set logstash default elasticsearch mapping through elasticsearch-template.json
body: <p>I use logstash + elasticsearch to collect syslog and want to set ttl for log ageing</p>
  
  <p>I find a file named elasticsearch-template.json in the logstash,the path is logstash/logstash-1.4.2/lib/logstash/outputs/elasticsearch/elasticsearch-template.json</p>
  
  <p>I add ttl info in the file like this:</p>
  
  <pre><code>{
    "template" : "logstash-*",
    "settings" : {
      "index.refresh_interval" : "5s"
    },
    "mappings" : {
      "_default_" : {
         "_all" : {"enabled" : true},
         "dynamic_templates" : [ {
           "string_fields" : {
             "match" : "*",
             "match_mapping_type" : "string",
             "mapping" : {
               "type" : "string", "index" : "analyzed", "omit_norms" : true,
                 "fields" : {
                   "raw" : {"type": "string", "index" : "not_analyzed", "ignore_above" : 256}
                 }
             }
           }
         } ],
          "_ttl": {
           "enabled": true,
           "default": "1d"
         },
         "properties" : {
           "@version": { "type": "string", "index": "not_analyzed" },
           "geoip"  : {
             "type" : "object",
               "dynamic": true,
               "path": "full",
               "properties" : {
                 "location" : { "type" : "geo_point" }
               }
           }
         }
      }
    }
  }
  </code></pre>
  
  <p>then restart logstash, delete all elasticsearch index. 
  I check the new index's mapping in the elasticsearch, but it didn't work in this way.</p>
  
  <p>How can I config the index template? </p>