From 44c75122edded7357ae11e36d76159be418baed9 Mon Sep 17 00:00:00 2001 From: Josh Brower Date: Tue, 16 Mar 2021 09:05:35 -0400 Subject: [PATCH] Update Sigmac mappings and config for IPs and ports --- salt/elasticsearch/files/ingest/common | 2 -- 1 file changed, 2 deletions(-) diff --git a/salt/elasticsearch/files/ingest/common b/salt/elasticsearch/files/ingest/common index 63eb6077a..e8e462053 100644 --- a/salt/elasticsearch/files/ingest/common +++ b/salt/elasticsearch/files/ingest/common @@ -32,8 +32,6 @@ { "rename": { "field": "category", "target_field": "event.category", "ignore_failure": true, "ignore_missing": true } }, { "rename": { "field": "message2.community_id", "target_field": "network.community_id", "ignore_failure": true, "ignore_missing": true } }, { "lowercase": { "field": "event.dataset", "ignore_failure": true, "ignore_missing": true } }, - { "convert": { "field": "destination.port", "type": "integer", "ignore_failure": true, "ignore_missing": true } }, - { "convert": { "field": "source.port", "type": "integer", "ignore_failure": true, "ignore_missing": true } }, { "convert": { "field": "log.id.uid", "type": "string", "ignore_failure": true, "ignore_missing": true } }, { "convert": { "field": "agent.id", "type": "string", "ignore_failure": true, "ignore_missing": true } }, { "convert": { "field": "event.severity", "type": "integer", "ignore_failure": true, "ignore_missing": true } },