CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-07 17:52:46 +01:00
Code Issues Packages Projects Releases Wiki Activity

WIP: Updated Detection Mappings, Changed Engine to Language

Browse Source 
Detection mappings updated to include the removal of Note and the addition of Tags, Ruleset, and Language.

SOC defaults updated to use language based queries rather than engine and show the language column instead of the engine column in results.
This commit is contained in:
Corey Ogburn
2024-02-08 09:44:56 -07:00
parent 81a3e95914
commit 29174566f3
2 changed files with 18 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
salt/elasticsearch/templates/component/so/detection-mappings.json
View File

@@ -47,13 +47,21 @@
"isCommunity": {
"type": "boolean"
},
"note": {
"tags": {
"type": "text"
},
"ruleset": {
"ignore_above": 1024,
"type": "keyword"
},
"engine": {
"ignore_above": 1024,
"type": "keyword"
},
"language": {
"ignore_above": 1024,
"type": "keyword"
},
"overrides": {
"properties": {
"type": {