diff --git a/salt/elasticsearch/templates/component/so/detection-mappings.json b/salt/elasticsearch/templates/component/so/detection-mappings.json index 105a0ead2..5e51b872b 100644 --- a/salt/elasticsearch/templates/component/so/detection-mappings.json +++ b/salt/elasticsearch/templates/component/so/detection-mappings.json @@ -20,10 +20,12 @@ "so_detection": { "properties": { "publicId": { - "type": "text" + "ignore_above": 1024, + "type": "keyword" }, "title": { - "type": "text" + "ignore_above": 1024, + "type": "keyword" }, "severity": { "ignore_above": 1024, @@ -36,6 +38,18 @@ "description": { "type": "text" }, + "category": { + "ignore_above": 1024, + "type": "keyword" + }, + "product": { + "ignore_above": 1024, + "type": "keyword" + }, + "service": { + "ignore_above": 1024, + "type": "keyword" + }, "content": { "type": "text" }, @@ -49,7 +63,8 @@ "type": "boolean" }, "tags": { - "type": "text" + "ignore_above": 1024, + "type": "keyword" }, "ruleset": { "ignore_above": 1024, @@ -136,4 +151,4 @@ "_meta": { "ecs_version": "1.12.2" } -} \ No newline at end of file +}