diff --git a/salt/elasticsearch/defaults.yaml b/salt/elasticsearch/defaults.yaml index b773c7b36..45b4b7d94 100644 --- a/salt/elasticsearch/defaults.yaml +++ b/salt/elasticsearch/defaults.yaml @@ -8414,6 +8414,50 @@ elasticsearch: set_priority: priority: 50 min_age: 30d + so-logs-ti_otx_x_pulses_subscribed: + index_sorting: false + index_template: + composed_of: + - logs-ti_otx.pulses_subscribed@package + - logs-ti_otx.pulses_subscribed@custom + - so-fleet_globals-1 + - so-fleet_agent_id_verification-1 + data_stream: + allow_custom_routing: false + hidden: false + index_patterns: + - logs-ti_otx.pulses_subscribed-* + priority: 501 + template: + settings: + index: + lifecycle: + name: so-logs-ti_otx.pulses_subscribed-logs + number_of_replicas: 0 + policy: + phases: + cold: + actions: + set_priority: + priority: 0 + min_age: 30d + delete: + actions: + delete: {} + min_age: 365d + hot: + actions: + rollover: + max_age: 30d + max_primary_shard_size: 50gb + set_priority: + priority: 100 + min_age: 0ms + warm: + actions: + set_priority: + priority: 50 + min_age: 30d so-logs-ti_otx_x_threat: index_sorting: false index_template: