metron-deployment/roles/elasticsearch/files/bro_index.template

{
    "template" : "bro_index*",
    "mappings" : {
        "bro_doc" : {
            "_timestamp" : { "enabled" : true },
            "properties": {
                        "timestamp":{"type":"date","format":"epoch_millis"},
                        "enrichments:geo:ip_dst_addr:location_point" : { "type" : "geo_point" }
            }
        }
    }
}