Merge pull request #11219 from Security-Onion-Solutions/fix/elastic_fortigate

Correct Fortigate Integration
This commit is contained in:
weslambert
2023-08-30 15:54:39 -04:00
committed by GitHub
2 changed files with 5 additions and 4 deletions

View File

@@ -41,6 +41,7 @@ elasticfleet:
- fleet_server
- fim
- fortinet
- fortinet_fortigate
- gcp
- github
- google_workspace

View File

@@ -970,18 +970,18 @@ elasticsearch:
data_stream:
hidden: false
allow_custom_routing: false
so-logs-fortinet_x_fortigate:
so-logs-fortinet_fortigate_x_log:
index_sorting: False
index_template:
index_patterns:
- "logs-fortinet.fortigate-*"
- "logs-fortinet_fortigate.log-*"
template:
settings:
index:
number_of_replicas: 0
composed_of:
- "logs-fortinet.fortigate@package"
- "logs-fortinet.fortigate@custom"
- "logs-fortinet_fortigate.log@package"
- "logs-fortinet_fortigate.log@custom"
- "so-fleet_globals-1"
- "so-fleet_agent_id_verification-1"
priority: 501