doc_type is no longer supported in ES > 7.x , however use_count_query and use_terms_query still check for it

[nickbabkin]

Hi!

doc_type was completely deprecated in ES > 7.x, however when I use use_count_query or use_terms_query in my rules, rule validation fails:

  File "/usr/local/lib/python3.5/dist-packages/elastalert-0.2.1-py3.5.egg/elastalert/loaders.py", line 373, in load_options
    raise EAException('doc_type must be specified.')
elastalert.util.EAException: doc_type must be specified.

In case ES 7.x cluster is used, this validation shall be omitted.

[nickbabkin]

This is the exact code block that needs to be changed:
loaders.py

        # Check that doc_type is provided if use_count/terms_query
        if rule.get('use_count_query') or rule.get('use_terms_query'):
            if 'doc_type' not in rule:
                raise EAException('doc_type must be specified.')

[cdalexndr]

Elasticsearch _type is deprecated, so doc_type option is no longer valid.
More info at: https://www.elastic.co/guide/en/elasticsearch/reference/current/removal-of-types.html