PUT _template/microsoft.dhcp
{
  "index_patterns": ["microsoft.dhcp-*"],
  "version": 1,
  "order": 1,
  "settings": {
    "number_of_shards": 1, 
    "number_of_replicas": 1, 
    "index": {
      "refresh_interval": "5s",
      "lifecycle": {
        "name": "microsoft.dhcp",
          "rollover_alias": "microsoft.dhcp"
      }
    }
  }, 
  "mappings": {
    "numeric_detection": true,
    "properties": {
      "dhcpv4": {
        "properties": {
         "client_ip": {
          "type": "ip"
          },
          "op_code": {
            "type": "keyword"
          }
        }
      },
      "related": {
        "properties": {
          "ip": {
            "type": "ip"
          }
        }
      }
    }
  }
}