CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 09:12:45 +01:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #7317 from Security-Onion-Solutions/fix/add_text_subfield_to_dtc_mappings

Browse Source 
Add .text subfield mappings for DTC where fields are defined
This commit is contained in:
weslambert
2022-02-24 14:47:11 -05:00
committed by GitHub
parent 5e29c71381 0f8a39002f
commit 22b01dab1e
14 changed files with 110 additions and 20 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
salt/elasticsearch/templates/component/so/dtc-agent-mappings.json
View File

@@ -12,6 +12,9 @@
"ignore_above": 1024,
"type": "keyword",
"fields": {
"text": {
"type": "match_only_text"
},
"keyword": {
"type": "keyword"
}
@@ -21,6 +24,9 @@
"ignore_above": 1024,
"type": "keyword",
"fields": {
"text": {
"type": "match_only_text"
},
"keyword": {
"type": "keyword"
}
@@ -30,6 +36,9 @@
"ignore_above": 1024,
"type": "keyword",
"fields": {
"text": {
"type": "match_only_text"
},
"keyword": {
"type": "keyword"
}
@@ -39,6 +48,9 @@
"ignore_above": 1024,
"type": "keyword",
"fields": {
"text": {
"type": "match_only_text"
},
"keyword": {
"type": "keyword"
}
@@ -48,6 +60,9 @@
"ignore_above": 1024,
"type": "keyword",
"fields": {
"text": {
"type": "match_only_text"
},
"keyword": {
"type": "keyword"
}

6
salt/elasticsearch/templates/component/so/dtc-base-mappings.json
View File

@@ -9,6 +9,9 @@
"message": {
"type": "match_only_text",
"fields": {
"text": {
"type": "match_only_text"
},
"keyword": {
"type": "keyword"
}
@@ -18,6 +21,9 @@
"ignore_above": 1024,
"type": "keyword",
"fields": {
"text": {
"type": "match_only_text"
},
"keyword": {
"type": "keyword"
}

5
salt/elasticsearch/templates/component/so/dtc-dns-mappings.json
View File

@@ -14,7 +14,10 @@
"ignore_above": 1024,
"type": "keyword",
"fields": {
"keyword": {
"text": {
"type": "match_only_text"
},
"keyword": {
"type": "keyword"
}
}

3
salt/elasticsearch/templates/component/so/dtc-ecs-mappings.json
View File

@@ -12,6 +12,9 @@
"ignore_above": 1024,
"type": "keyword",
"fields": {
"text": {
"type": "match_only_text"
},
"keyword": {
"type": "keyword"
}

30
salt/elasticsearch/templates/component/so/dtc-event-mappings.json
View File

@@ -12,6 +12,9 @@
"ignore_above": 1024,
"type": "keyword",
"fields": {
"text": {
"type": "match_only_text"
},
"keyword": {
"type": "keyword"
}
@@ -20,6 +23,9 @@
"created": {
"type": "date",
"fields": {
"text": {
"type": "match_only_text"
},
"keyword": {
"type": "keyword"
}
@@ -29,14 +35,20 @@
"ignore_above": 1024,
"type": "keyword",
"fields": {
"text": {
"type": "match_only_text"
},
"keyword": {
"type": "keyword"
}
"type": "keyword"
}
}
},
"ingested": {
"type": "date",
"fields": {
"text": {
"type": "match_only_text"
},
"keyword": {
"type": "keyword"
}
@@ -45,7 +57,10 @@
"module": {
"ignore_above": 1024,
"type": "keyword",
"fields": {
"fields": {
"text": {
"type": "match_only_text"
},
"keyword": {
"type": "keyword"
}
@@ -55,6 +70,9 @@
"ignore_above": 1024,
"type": "keyword",
"fields": {
"text": {
"type": "match_only_text"
},
"keyword": {
"type": "keyword"
}
@@ -64,6 +82,9 @@
"ignore_above": 1024,
"type": "keyword",
"fields": {
"text": {
"type": "match_only_text"
},
"keyword": {
"type": "keyword"
}
@@ -73,6 +94,9 @@
"ignore_above": 1024,
"type": "keyword",
"fields": {
"text": {
"type": "match_only_text"
},
"keyword": {
"type": "keyword"
}

6
salt/elasticsearch/templates/component/so/dtc-file-mappings.json
View File

@@ -12,6 +12,9 @@
"ignore_above": 1024,
"type": "keyword",
"fields": {
"text": {
"type": "match_only_text"
},
"keyword": {
"type": "keyword"
}
@@ -21,6 +24,9 @@
"ignore_above": 1024,
"type": "keyword",
"fields": {
"text": {
"type": "match_only_text"
},
"keyword": {
"type": "keyword"
}

8
salt/elasticsearch/templates/component/so/dtc-host-mappings.json
View File

@@ -12,15 +12,21 @@
"ignore_above": 1024,
"type": "keyword",
"fields": {
"text": {
"type": "match_only_text"
},
"keyword": {
"type": "keyword"
}
}
},
"mac": {
"mac": {
"ignore_above": 1024,
"type": "keyword",
"fields": {
"text": {
"type": "match_only_text"
},
"keyword": {
"type": "keyword"
}

6
salt/elasticsearch/templates/component/so/dtc-http-mappings.json
View File

@@ -14,6 +14,9 @@
"ignore_above": 1024,
"type": "keyword",
"fields": {
"text": {
"type": "match_only_text"
},
"keyword": {
"type": "keyword"
}
@@ -23,6 +26,9 @@
"ignore_above": 1024,
"type": "keyword",
"fields": {
"text": {
"type": "match_only_text"
},
"keyword": {
"type": "keyword"
}

16
salt/elasticsearch/templates/component/so/dtc-network-mappings.json
View File

@@ -12,6 +12,9 @@
"ignore_above": 1024,
"type": "keyword",
"fields": {
"text": {
"type": "match_only_text"
},
"keyword": {
"type": "keyword"
}
@@ -20,11 +23,14 @@
"transport": {
"ignore_above": 1024,
"type": "keyword",
"fields": {
"keyword": {
"type": "keyword"
}
}
"fields": {
"text": {
"type": "match_only_text"
},
"keyword": {
"type": "keyword"
}
}
}
}
}

5
salt/elasticsearch/templates/component/so/dtc-observer-mappings.json
View File

@@ -11,7 +11,10 @@
"name": {
"ignore_above": 1024,
"type": "keyword",
"fields": {
"fields": {
"text": {
"type": "match_only_text"
},
"keyword": {
"type": "keyword"
}

2
salt/elasticsearch/templates/component/so/dtc-process-mappings.json
View File

@@ -20,7 +20,7 @@
"type": "wildcard"
}
}
}
}
}
}
}

18
salt/elasticsearch/templates/component/so/dtc-rule-mappings.json
View File

@@ -11,16 +11,22 @@
"category": {
"ignore_above": 1024,
"type": "keyword",
"fields": {
"keyword": {
"type": "keyword"
}
}
"fields": {
"text": {
"type": "match_only_text"
},
"keyword": {
"type": "keyword"
}
}
},
"name": {
"ignore_above": 1024,
"type": "keyword",
"fields": {
"fields": {
"text": {
"type": "match_only_text"
},
"keyword": {
"type": "keyword"
}

6
salt/elasticsearch/templates/component/so/dtc-service-mappings.json
View File

@@ -12,6 +12,9 @@
"ignore_above": 1024,
"type": "keyword",
"fields": {
"text": {
"type": "match_only_text"
},
"keyword": {
"type": "keyword"
}
@@ -21,6 +24,9 @@
"ignore_above": 1024,
"type": "keyword",
"fields": {
"text": {
"type": "match_only_text"
},
"keyword": {
"type": "keyword"
}

4
salt/elasticsearch/templates/component/so/dtc-user-mappings.json
View File

@@ -14,8 +14,8 @@
"type": "match_only_text"
},
"keyword": {
"type": "keyword"
}
"type": "keyword"
}
},
"ignore_above": 1024,
"type": "keyword"