Add keyword subfield for DTC winlog mappings

This commit is contained in:
Wes Lambert
2022-03-03 14:54:30 +00:00
parent 1c086e36da
commit 1f71816ad7

View File

@@ -55,6 +55,9 @@
"security": { "security": {
"type": "text", "type": "text",
"analyzer": "es_security_analyzer" "analyzer": "es_security_analyzer"
},
"keyword": {
"type": "keyword"
} }
} }
}, },
@@ -65,6 +68,9 @@
"security": { "security": {
"type": "text", "type": "text",
"analyzer": "es_security_analyzer" "analyzer": "es_security_analyzer"
},
"keyword": {
"type": "keyword"
} }
} }
} }