CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-11 19:52:51 +01:00
Code Issues Packages Projects Releases Wiki Activity

Add .text subfield mappings for DTC where fields are defined

Browse Source
This commit is contained in:
Wes Lambert
2022-02-24 19:39:52 +00:00
parent 5e29c71381
commit 0f8a39002f
14 changed files with 110 additions and 20 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
salt/elasticsearch/templates/component/so/dtc-agent-mappings.json
View File

@@ -12,6 +12,9 @@
"ignore_above": 1024, "ignore_above": 1024,
"type": "keyword", "type": "keyword",
"fields": { "fields": {
"text": {
"type": "match_only_text"
},
"keyword": { "keyword": {
"type": "keyword" "type": "keyword"
} }
@@ -21,6 +24,9 @@
"ignore_above": 1024, "ignore_above": 1024,
"type": "keyword", "type": "keyword",
"fields": { "fields": {
"text": {
"type": "match_only_text"
},
"keyword": { "keyword": {
"type": "keyword" "type": "keyword"
} }
@@ -30,6 +36,9 @@
"ignore_above": 1024, "ignore_above": 1024,
"type": "keyword", "type": "keyword",
"fields": { "fields": {
"text": {
"type": "match_only_text"
},
"keyword": { "keyword": {
"type": "keyword" "type": "keyword"
} }
@@ -39,6 +48,9 @@
"ignore_above": 1024, "ignore_above": 1024,
"type": "keyword", "type": "keyword",
"fields": { "fields": {
"text": {
"type": "match_only_text"
},
"keyword": { "keyword": {
"type": "keyword" "type": "keyword"
} }
@@ -48,6 +60,9 @@
"ignore_above": 1024, "ignore_above": 1024,
"type": "keyword", "type": "keyword",
"fields": { "fields": {
"text": {
"type": "match_only_text"
},
"keyword": { "keyword": {
"type": "keyword" "type": "keyword"
} }

6
salt/elasticsearch/templates/component/so/dtc-base-mappings.json
View File

@@ -9,6 +9,9 @@
"message": { "message": {
"type": "match_only_text", "type": "match_only_text",
"fields": { "fields": {
"text": {
"type": "match_only_text"
},
"keyword": { "keyword": {
"type": "keyword" "type": "keyword"
} }
@@ -18,6 +21,9 @@
"ignore_above": 1024, "ignore_above": 1024,
"type": "keyword", "type": "keyword",
"fields": { "fields": {
"text": {
"type": "match_only_text"
},
"keyword": { "keyword": {
"type": "keyword" "type": "keyword"
} }

3
salt/elasticsearch/templates/component/so/dtc-dns-mappings.json
View File

@@ -14,6 +14,9 @@
"ignore_above": 1024, "ignore_above": 1024,
"type": "keyword", "type": "keyword",
"fields": { "fields": {
"text": {
"type": "match_only_text"
},
"keyword": { "keyword": {
"type": "keyword" "type": "keyword"
} }

3
salt/elasticsearch/templates/component/so/dtc-ecs-mappings.json
View File

@@ -12,6 +12,9 @@
"ignore_above": 1024, "ignore_above": 1024,
"type": "keyword", "type": "keyword",
"fields": { "fields": {
"text": {
"type": "match_only_text"
},
"keyword": { "keyword": {
"type": "keyword" "type": "keyword"
} }

24
salt/elasticsearch/templates/component/so/dtc-event-mappings.json
View File

@@ -12,6 +12,9 @@
"ignore_above": 1024, "ignore_above": 1024,
"type": "keyword", "type": "keyword",
"fields": { "fields": {
"text": {
"type": "match_only_text"
},
"keyword": { "keyword": {
"type": "keyword" "type": "keyword"
} }
@@ -20,6 +23,9 @@
"created": { "created": {
"type": "date", "type": "date",
"fields": { "fields": {
"text": {
"type": "match_only_text"
},
"keyword": { "keyword": {
"type": "keyword" "type": "keyword"
} }
@@ -29,6 +35,9 @@
"ignore_above": 1024, "ignore_above": 1024,
"type": "keyword", "type": "keyword",
"fields": { "fields": {
"text": {
"type": "match_only_text"
},
"keyword": { "keyword": {
"type": "keyword" "type": "keyword"
} }
@@ -37,6 +46,9 @@
"ingested": { "ingested": {
"type": "date", "type": "date",
"fields": { "fields": {
"text": {
"type": "match_only_text"
},
"keyword": { "keyword": {
"type": "keyword" "type": "keyword"
} }
@@ -46,6 +58,9 @@
"ignore_above": 1024, "ignore_above": 1024,
"type": "keyword", "type": "keyword",
"fields": { "fields": {
"text": {
"type": "match_only_text"
},
"keyword": { "keyword": {
"type": "keyword" "type": "keyword"
} }
@@ -55,6 +70,9 @@
"ignore_above": 1024, "ignore_above": 1024,
"type": "keyword", "type": "keyword",
"fields": { "fields": {
"text": {
"type": "match_only_text"
},
"keyword": { "keyword": {
"type": "keyword" "type": "keyword"
} }
@@ -64,6 +82,9 @@
"ignore_above": 1024, "ignore_above": 1024,
"type": "keyword", "type": "keyword",
"fields": { "fields": {
"text": {
"type": "match_only_text"
},
"keyword": { "keyword": {
"type": "keyword" "type": "keyword"
} }
@@ -73,6 +94,9 @@
"ignore_above": 1024, "ignore_above": 1024,
"type": "keyword", "type": "keyword",
"fields": { "fields": {
"text": {
"type": "match_only_text"
},
"keyword": { "keyword": {
"type": "keyword" "type": "keyword"
} }

6
salt/elasticsearch/templates/component/so/dtc-file-mappings.json
View File

@@ -12,6 +12,9 @@
"ignore_above": 1024, "ignore_above": 1024,
"type": "keyword", "type": "keyword",
"fields": { "fields": {
"text": {
"type": "match_only_text"
},
"keyword": { "keyword": {
"type": "keyword" "type": "keyword"
} }
@@ -21,6 +24,9 @@
"ignore_above": 1024, "ignore_above": 1024,
"type": "keyword", "type": "keyword",
"fields": { "fields": {
"text": {
"type": "match_only_text"
},
"keyword": { "keyword": {
"type": "keyword" "type": "keyword"
} }

6
salt/elasticsearch/templates/component/so/dtc-host-mappings.json
View File

@@ -12,6 +12,9 @@
"ignore_above": 1024, "ignore_above": 1024,
"type": "keyword", "type": "keyword",
"fields": { "fields": {
"text": {
"type": "match_only_text"
},
"keyword": { "keyword": {
"type": "keyword" "type": "keyword"
} }
@@ -21,6 +24,9 @@
"ignore_above": 1024, "ignore_above": 1024,
"type": "keyword", "type": "keyword",
"fields": { "fields": {
"text": {
"type": "match_only_text"
},
"keyword": { "keyword": {
"type": "keyword" "type": "keyword"
} }

6
salt/elasticsearch/templates/component/so/dtc-http-mappings.json
View File

@@ -14,6 +14,9 @@
"ignore_above": 1024, "ignore_above": 1024,
"type": "keyword", "type": "keyword",
"fields": { "fields": {
"text": {
"type": "match_only_text"
},
"keyword": { "keyword": {
"type": "keyword" "type": "keyword"
} }
@@ -23,6 +26,9 @@
"ignore_above": 1024, "ignore_above": 1024,
"type": "keyword", "type": "keyword",
"fields": { "fields": {
"text": {
"type": "match_only_text"
},
"keyword": { "keyword": {
"type": "keyword" "type": "keyword"
} }

6
salt/elasticsearch/templates/component/so/dtc-network-mappings.json
View File

@@ -12,6 +12,9 @@
"ignore_above": 1024, "ignore_above": 1024,
"type": "keyword", "type": "keyword",
"fields": { "fields": {
"text": {
"type": "match_only_text"
},
"keyword": { "keyword": {
"type": "keyword" "type": "keyword"
} }
@@ -21,6 +24,9 @@
"ignore_above": 1024, "ignore_above": 1024,
"type": "keyword", "type": "keyword",
"fields": { "fields": {
"text": {
"type": "match_only_text"
},
"keyword": { "keyword": {
"type": "keyword" "type": "keyword"
} }

3
salt/elasticsearch/templates/component/so/dtc-observer-mappings.json
View File

@@ -12,6 +12,9 @@
"ignore_above": 1024, "ignore_above": 1024,
"type": "keyword", "type": "keyword",
"fields": { "fields": {
"text": {
"type": "match_only_text"
},
"keyword": { "keyword": {
"type": "keyword" "type": "keyword"
} }

6
salt/elasticsearch/templates/component/so/dtc-rule-mappings.json
View File

@@ -12,6 +12,9 @@
"ignore_above": 1024, "ignore_above": 1024,
"type": "keyword", "type": "keyword",
"fields": { "fields": {
"text": {
"type": "match_only_text"
},
"keyword": { "keyword": {
"type": "keyword" "type": "keyword"
} }
@@ -21,6 +24,9 @@
"ignore_above": 1024, "ignore_above": 1024,
"type": "keyword", "type": "keyword",
"fields": { "fields": {
"text": {
"type": "match_only_text"
},
"keyword": { "keyword": {
"type": "keyword" "type": "keyword"
} }

6
salt/elasticsearch/templates/component/so/dtc-service-mappings.json
View File

@@ -12,6 +12,9 @@
"ignore_above": 1024, "ignore_above": 1024,
"type": "keyword", "type": "keyword",
"fields": { "fields": {
"text": {
"type": "match_only_text"
},
"keyword": { "keyword": {
"type": "keyword" "type": "keyword"
} }
@@ -21,6 +24,9 @@
"ignore_above": 1024, "ignore_above": 1024,
"type": "keyword", "type": "keyword",
"fields": { "fields": {
"text": {
"type": "match_only_text"
},
"keyword": { "keyword": {
"type": "keyword" "type": "keyword"
} }