Detection Author as a Keyword instead of Text

With Quick Actions added to Detections, as many fields should be usable as possible.
This commit is contained in:
Corey Ogburn
2024-04-05 11:22:47 -06:00
parent cbc95d0b30
commit 00cea6fb80

View File

@@ -30,7 +30,8 @@
"type": "keyword" "type": "keyword"
}, },
"author": { "author": {
"type": "text" "ignore_above": 1024,
"type": "keyword"
}, },
"description": { "description": {
"type": "text" "type": "text"