opensearch_get_mapping
Retrieve all field names and data types for an OpenSearch index to view its mapping schema.
Instructions
Use to see all field names and types; if you get 403 use opensearch_discover_fields instead.
opensearch_discover_fields only requires search privilege (not indices:admin/mappings/get) but only returns fields present in sampled documents. Returns nested fields flattened to dot-notation, e.g. "rule.level": "integer".
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| index | Yes | Index name or wildcard pattern, e.g. "wazuh-alerts-*". |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||