Detection Author as a Keyword instead of Text

With Quick Actions added to Detections, as many fields should be usable as possible.
2025-12-06 09:12:45 +01:00 · 2024-04-05 11:22:47 -06:00
parent cbc95d0b30
commit 00cea6fb80
1 changed files with 2 additions and 1 deletions
--- a/salt/elasticsearch/templates/component/so/detection-mappings.json
+++ b/salt/elasticsearch/templates/component/so/detection-mappings.json
@@ -30,7 +30,8 @@
              "type": "keyword"
            },
            "author": {
-              "type": "text"
+              "ignore_above": 1024,
+              "type": "keyword"
            },
            "description": {
              "type": "text"