CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 17:22:49 +01:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #7317 from Security-Onion-Solutions/fix/add_text_subfield_to_dtc_mappings

Browse Source 
Add .text subfield mappings for DTC where fields are defined
This commit is contained in:
weslambert
2022-02-24 14:47:11 -05:00
committed by GitHub
parent 5e29c71381 0f8a39002f
commit 22b01dab1e
14 changed files with 110 additions and 20 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
salt/elasticsearch/templates/component/so/dtc-agent-mappings.json
View File

@@ -12,6 +12,9 @@
"ignore_above": 1024, "ignore_above": 1024,
"type": "keyword", "type": "keyword",
"fields": { "fields": {
"text": {
"type": "match_only_text"
},
"keyword": { "keyword": {
"type": "keyword" "type": "keyword"
} }
@@ -21,6 +24,9 @@
"ignore_above": 1024, "ignore_above": 1024,
"type": "keyword", "type": "keyword",
"fields": { "fields": {
"text": {
"type": "match_only_text"
},
"keyword": { "keyword": {
"type": "keyword" "type": "keyword"
} }
@@ -30,6 +36,9 @@
"ignore_above": 1024, "ignore_above": 1024,
"type": "keyword", "type": "keyword",
"fields": { "fields": {
"text": {
"type": "match_only_text"
},
"keyword": { "keyword": {
"type": "keyword" "type": "keyword"
} }
@@ -39,6 +48,9 @@
"ignore_above": 1024, "ignore_above": 1024,
"type": "keyword", "type": "keyword",
"fields": { "fields": {
"text": {
"type": "match_only_text"
},
"keyword": { "keyword": {
"type": "keyword" "type": "keyword"
} }
@@ -48,6 +60,9 @@
"ignore_above": 1024, "ignore_above": 1024,
"type": "keyword", "type": "keyword",
"fields": { "fields": {
"text": {
"type": "match_only_text"
},
"keyword": { "keyword": {
"type": "keyword" "type": "keyword"
} }

6
salt/elasticsearch/templates/component/so/dtc-base-mappings.json
View File

@@ -9,6 +9,9 @@
"message": { "message": {
"type": "match_only_text", "type": "match_only_text",
"fields": { "fields": {
"text": {
"type": "match_only_text"
},
"keyword": { "keyword": {
"type": "keyword" "type": "keyword"
} }
@@ -18,6 +21,9 @@
"ignore_above": 1024, "ignore_above": 1024,
"type": "keyword", "type": "keyword",
"fields": { "fields": {
"text": {
"type": "match_only_text"
},
"keyword": { "keyword": {
"type": "keyword" "type": "keyword"
} }

5
salt/elasticsearch/templates/component/so/dtc-dns-mappings.json
View File

@@ -14,7 +14,10 @@
"ignore_above": 1024, "ignore_above": 1024,
"type": "keyword", "type": "keyword",
"fields": { "fields": {
"keyword": { "text": {
"type": "match_only_text"
},
"keyword": {
"type": "keyword" "type": "keyword"
} }
} }

3
salt/elasticsearch/templates/component/so/dtc-ecs-mappings.json
View File

@@ -12,6 +12,9 @@
"ignore_above": 1024, "ignore_above": 1024,
"type": "keyword", "type": "keyword",
"fields": { "fields": {
"text": {
"type": "match_only_text"
},
"keyword": { "keyword": {
"type": "keyword" "type": "keyword"
} }

30
salt/elasticsearch/templates/component/so/dtc-event-mappings.json
View File

@@ -12,6 +12,9 @@
"ignore_above": 1024, "ignore_above": 1024,
"type": "keyword", "type": "keyword",
"fields": { "fields": {
"text": {
"type": "match_only_text"
},
"keyword": { "keyword": {
"type": "keyword" "type": "keyword"
} }
@@ -20,6 +23,9 @@
"created": { "created": {
"type": "date", "type": "date",
"fields": { "fields": {
"text": {
"type": "match_only_text"
},
"keyword": { "keyword": {
"type": "keyword" "type": "keyword"
} }
@@ -29,14 +35,20 @@
"ignore_above": 1024, "ignore_above": 1024,
"type": "keyword", "type": "keyword",
"fields": { "fields": {
"text": {
"type": "match_only_text"
},
"keyword": { "keyword": {
"type": "keyword" "type": "keyword"
} }
} }
}, },
"ingested": { "ingested": {
"type": "date", "type": "date",
"fields": { "fields": {
"text": {
"type": "match_only_text"
},
"keyword": { "keyword": {
"type": "keyword" "type": "keyword"
} }
@@ -45,7 +57,10 @@
"module": { "module": {
"ignore_above": 1024, "ignore_above": 1024,
"type": "keyword", "type": "keyword",
"fields": { "fields": {
"text": {
"type": "match_only_text"
},
"keyword": { "keyword": {
"type": "keyword" "type": "keyword"
} }
@@ -55,6 +70,9 @@
"ignore_above": 1024, "ignore_above": 1024,
"type": "keyword", "type": "keyword",
"fields": { "fields": {
"text": {
"type": "match_only_text"
},
"keyword": { "keyword": {
"type": "keyword" "type": "keyword"
} }
@@ -64,6 +82,9 @@
"ignore_above": 1024, "ignore_above": 1024,
"type": "keyword", "type": "keyword",
"fields": { "fields": {
"text": {
"type": "match_only_text"
},
"keyword": { "keyword": {
"type": "keyword" "type": "keyword"
} }
@@ -73,6 +94,9 @@
"ignore_above": 1024, "ignore_above": 1024,
"type": "keyword", "type": "keyword",
"fields": { "fields": {
"text": {
"type": "match_only_text"
},
"keyword": { "keyword": {
"type": "keyword" "type": "keyword"
} }

6
salt/elasticsearch/templates/component/so/dtc-file-mappings.json
View File

@@ -12,6 +12,9 @@
"ignore_above": 1024, "ignore_above": 1024,
"type": "keyword", "type": "keyword",
"fields": { "fields": {
"text": {
"type": "match_only_text"
},
"keyword": { "keyword": {
"type": "keyword" "type": "keyword"
} }
@@ -21,6 +24,9 @@
"ignore_above": 1024, "ignore_above": 1024,
"type": "keyword", "type": "keyword",
"fields": { "fields": {
"text": {
"type": "match_only_text"
},
"keyword": { "keyword": {
"type": "keyword" "type": "keyword"
} }

8
salt/elasticsearch/templates/component/so/dtc-host-mappings.json
View File

@@ -12,15 +12,21 @@
"ignore_above": 1024, "ignore_above": 1024,
"type": "keyword", "type": "keyword",
"fields": { "fields": {
"text": {
"type": "match_only_text"
},
"keyword": { "keyword": {
"type": "keyword" "type": "keyword"
} }
} }
}, },
"mac": { "mac": {
"ignore_above": 1024, "ignore_above": 1024,
"type": "keyword", "type": "keyword",
"fields": { "fields": {
"text": {
"type": "match_only_text"
},
"keyword": { "keyword": {
"type": "keyword" "type": "keyword"
} }

6
salt/elasticsearch/templates/component/so/dtc-http-mappings.json
View File

@@ -14,6 +14,9 @@
"ignore_above": 1024, "ignore_above": 1024,
"type": "keyword", "type": "keyword",
"fields": { "fields": {
"text": {
"type": "match_only_text"
},
"keyword": { "keyword": {
"type": "keyword" "type": "keyword"
} }
@@ -23,6 +26,9 @@
"ignore_above": 1024, "ignore_above": 1024,
"type": "keyword", "type": "keyword",
"fields": { "fields": {
"text": {
"type": "match_only_text"
},
"keyword": { "keyword": {
"type": "keyword" "type": "keyword"
} }

16
salt/elasticsearch/templates/component/so/dtc-network-mappings.json
View File

@@ -12,6 +12,9 @@
"ignore_above": 1024, "ignore_above": 1024,
"type": "keyword", "type": "keyword",
"fields": { "fields": {
"text": {
"type": "match_only_text"
},
"keyword": { "keyword": {
"type": "keyword" "type": "keyword"
} }
@@ -20,11 +23,14 @@
"transport": { "transport": {
"ignore_above": 1024, "ignore_above": 1024,
"type": "keyword", "type": "keyword",
"fields": { "fields": {
"keyword": { "text": {
"type": "keyword" "type": "match_only_text"
} },
} "keyword": {
"type": "keyword"
}
}
} }
} }
} }

5
salt/elasticsearch/templates/component/so/dtc-observer-mappings.json
View File

@@ -11,7 +11,10 @@
"name": { "name": {
"ignore_above": 1024, "ignore_above": 1024,
"type": "keyword", "type": "keyword",
"fields": { "fields": {
"text": {
"type": "match_only_text"
},
"keyword": { "keyword": {
"type": "keyword" "type": "keyword"
} }

2
salt/elasticsearch/templates/component/so/dtc-process-mappings.json
View File

@@ -20,7 +20,7 @@
"type": "wildcard" "type": "wildcard"
} }
} }
} }
} }
} }
} }

18
salt/elasticsearch/templates/component/so/dtc-rule-mappings.json
View File

@@ -11,16 +11,22 @@
"category": { "category": {
"ignore_above": 1024, "ignore_above": 1024,
"type": "keyword", "type": "keyword",
"fields": { "fields": {
"keyword": { "text": {
"type": "keyword" "type": "match_only_text"
} },
} "keyword": {
"type": "keyword"
}
}
}, },
"name": { "name": {
"ignore_above": 1024, "ignore_above": 1024,
"type": "keyword", "type": "keyword",
"fields": { "fields": {
"text": {
"type": "match_only_text"
},
"keyword": { "keyword": {
"type": "keyword" "type": "keyword"
} }

6
salt/elasticsearch/templates/component/so/dtc-service-mappings.json
View File

@@ -12,6 +12,9 @@
"ignore_above": 1024, "ignore_above": 1024,
"type": "keyword", "type": "keyword",
"fields": { "fields": {
"text": {
"type": "match_only_text"
},
"keyword": { "keyword": {
"type": "keyword" "type": "keyword"
} }
@@ -21,6 +24,9 @@
"ignore_above": 1024, "ignore_above": 1024,
"type": "keyword", "type": "keyword",
"fields": { "fields": {
"text": {
"type": "match_only_text"
},
"keyword": { "keyword": {
"type": "keyword" "type": "keyword"
} }

4
salt/elasticsearch/templates/component/so/dtc-user-mappings.json
View File

@@ -14,8 +14,8 @@
"type": "match_only_text" "type": "match_only_text"
}, },
"keyword": { "keyword": {
"type": "keyword" "type": "keyword"
} }
}, },
"ignore_above": 1024, "ignore_above": 1024,
"type": "keyword" "type": "keyword"