mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-06 17:22:49 +01:00
Add keyword subfield for DTC winlog mappings
This commit is contained in:
@@ -55,6 +55,9 @@
|
|||||||
"security": {
|
"security": {
|
||||||
"type": "text",
|
"type": "text",
|
||||||
"analyzer": "es_security_analyzer"
|
"analyzer": "es_security_analyzer"
|
||||||
|
},
|
||||||
|
"keyword": {
|
||||||
|
"type": "keyword"
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
},
|
},
|
||||||
@@ -65,6 +68,9 @@
|
|||||||
"security": {
|
"security": {
|
||||||
"type": "text",
|
"type": "text",
|
||||||
"analyzer": "es_security_analyzer"
|
"analyzer": "es_security_analyzer"
|
||||||
|
},
|
||||||
|
"keyword": {
|
||||||
|
"type": "keyword"
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|||||||
Reference in New Issue
Block a user