Merge pull request #438 from Security-Onion-Solutions/fix/elastic_fixes

Fix/elastic fixes

salt/filebeat/etc/filebeat.yml

@@ -226,7 +226,7 @@ output.elasticsearch:
   # Client Certificate Key
   #ssl.key: "/usr/share/filebeat/filebeat.key"
 
-
+setup.template.enabled: false
   # A dictionary of settings to place into the settings.index dictionary
   # of the Elasticsearch template. For more details, please check
   # https://www.elastic.co/guide/en/elasticsearch/reference/current/mapping.html

salt/logstash/pipelines/templates/so/so-beats-template.json

@@ -2,8 +2,7 @@
   "index_patterns": [
     "so-beats-*"
   ],
-  "mappings": {
-    "doc": {
+    "mappings": {
       "_meta": {
         "version": "6.1.3"
       },
@@ -1265,12 +1264,11 @@
                   "ignore_above": 1024,
                   "type": "keyword"
                 }
-              }
-            }
-          }
-        }
-      }
-    }
+             }
+           }
+         }
+       }
+     }
   },
   "order": 1,
   "settings": {

salt/logstash/pipelines/templates/so/so-common-template.json

@@ -8,7 +8,6 @@
     "index.refresh_interval":"30s"
   },
   "mappings":{
-    "doc":{
        "dynamic": false,
        "date_detection": false,
        "properties":{
@@ -349,7 +348,6 @@
           "type":"object",
           "dynamic": true
         }
-      }
-    }
+     }
   }
 }