CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 09:12:45 +01:00
Code Issues Packages Projects Releases Wiki Activity

Add additional scan and rule filset mappings

Browse Source
This commit is contained in:
Wes Lambert
2022-02-04 19:05:09 +00:00
parent 08c7181f1a
commit 317f6471d8
2 changed files with 50 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

19
salt/elasticsearch/templates/component/so/so-rule-mappings.json Normal file
View File

@@ -0,0 +1,19 @@
{
"_meta": {
"documentation": "https://www.elastic.co/guide/en/ecs/current/ecs-file.html",
"ecs_version": "1.12.2"
},
"template": {
"mappings": {
"properties": {
"rule":{
"properties":{
"score":{
"type":"long"
}
}
}
}
}
}
}

31
salt/elasticsearch/templates/component/so/so-scan-mappings.json Normal file
View File

@@ -0,0 +1,31 @@
{
"_meta": {
"documentation": "https://www.elastic.co/guide/en/ecs/current/ecs-file.html",
"ecs_version": "1.12.2"
},
"template": {
"mappings": {
"properties": {
"scan":{
"type":"object",
"properties":{
"exiftool":{
"type":"text"
},
"pe":{
"properties":{
"sections":{
"properties":{
"entropy":{
"type": "float"
}
}
}
}
}
}
}
}
}
}
}