diff --git a/salt/elasticsearch/templates/component/so/dtc-winlog-mappings.json b/salt/elasticsearch/templates/component/so/dtc-winlog-mappings.json
index dbf4e169a..09c157c1e 100644
--- a/salt/elasticsearch/templates/component/so/dtc-winlog-mappings.json
+++ b/salt/elasticsearch/templates/component/so/dtc-winlog-mappings.json
@@ -55,6 +55,9 @@
                 "security": {
                   "type": "text",
                   "analyzer": "es_security_analyzer"
+                },
+		"keyword": {
+                  "type": "keyword"
                 }
               }
             },
@@ -65,6 +68,9 @@
                 "security": {
                   "type": "text",
                   "analyzer": "es_security_analyzer"
+                },
+		"keyword": {
+                  "type": "keyword"
                 }
               }
             }