mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-06 17:22:49 +01:00
Merge pull request #11219 from Security-Onion-Solutions/fix/elastic_fortigate
Correct Fortigate Integration
This commit is contained in:
@@ -41,6 +41,7 @@ elasticfleet:
|
||||
- fleet_server
|
||||
- fim
|
||||
- fortinet
|
||||
- fortinet_fortigate
|
||||
- gcp
|
||||
- github
|
||||
- google_workspace
|
||||
|
||||
@@ -970,18 +970,18 @@ elasticsearch:
|
||||
data_stream:
|
||||
hidden: false
|
||||
allow_custom_routing: false
|
||||
so-logs-fortinet_x_fortigate:
|
||||
so-logs-fortinet_fortigate_x_log:
|
||||
index_sorting: False
|
||||
index_template:
|
||||
index_patterns:
|
||||
- "logs-fortinet.fortigate-*"
|
||||
- "logs-fortinet_fortigate.log-*"
|
||||
template:
|
||||
settings:
|
||||
index:
|
||||
number_of_replicas: 0
|
||||
composed_of:
|
||||
- "logs-fortinet.fortigate@package"
|
||||
- "logs-fortinet.fortigate@custom"
|
||||
- "logs-fortinet_fortigate.log@package"
|
||||
- "logs-fortinet_fortigate.log@custom"
|
||||
- "so-fleet_globals-1"
|
||||
- "so-fleet_agent_id_verification-1"
|
||||
priority: 501
|
||||
|
||||
Reference in New Issue
Block a user