mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-06 17:22:49 +01:00
Update index pattern in various template definitions to match new data stream naming convention
This commit is contained in:
@@ -1165,7 +1165,7 @@ elasticsearch:
|
|||||||
index_template:
|
index_template:
|
||||||
data_stream: {}
|
data_stream: {}
|
||||||
index_patterns:
|
index_patterns:
|
||||||
- logs-*_so
|
- logs-*-so*
|
||||||
template:
|
template:
|
||||||
mappings:
|
mappings:
|
||||||
dynamic_templates:
|
dynamic_templates:
|
||||||
@@ -1418,7 +1418,7 @@ elasticsearch:
|
|||||||
index_sorting: False
|
index_sorting: False
|
||||||
index_template:
|
index_template:
|
||||||
index_patterns:
|
index_patterns:
|
||||||
- so-elasticsearch*
|
- logs-elasticsearch-default*
|
||||||
template:
|
template:
|
||||||
mappings:
|
mappings:
|
||||||
dynamic_templates:
|
dynamic_templates:
|
||||||
@@ -2171,7 +2171,7 @@ elasticsearch:
|
|||||||
index_template:
|
index_template:
|
||||||
data_stream: {}
|
data_stream: {}
|
||||||
index_patterns:
|
index_patterns:
|
||||||
- logs-*-suricata_so
|
- logs-suricata-so*
|
||||||
template:
|
template:
|
||||||
mappings:
|
mappings:
|
||||||
dynamic_templates:
|
dynamic_templates:
|
||||||
@@ -2339,7 +2339,7 @@ elasticsearch:
|
|||||||
index_template:
|
index_template:
|
||||||
data_stream: {}
|
data_stream: {}
|
||||||
index_patterns:
|
index_patterns:
|
||||||
- logs-*-import_so
|
- logs-import-so*
|
||||||
template:
|
template:
|
||||||
mappings:
|
mappings:
|
||||||
dynamic_templates:
|
dynamic_templates:
|
||||||
@@ -2678,7 +2678,7 @@ elasticsearch:
|
|||||||
index_sorting: False
|
index_sorting: False
|
||||||
index_template:
|
index_template:
|
||||||
index_patterns:
|
index_patterns:
|
||||||
- logs-*-kratos_so
|
- logs-kratos-so*
|
||||||
template:
|
template:
|
||||||
mappings:
|
mappings:
|
||||||
dynamic_templates:
|
dynamic_templates:
|
||||||
@@ -2755,7 +2755,7 @@ elasticsearch:
|
|||||||
index_sorting: False
|
index_sorting: False
|
||||||
index_template:
|
index_template:
|
||||||
index_patterns:
|
index_patterns:
|
||||||
- so-logstash*
|
- logs-logstash-default*
|
||||||
template:
|
template:
|
||||||
mappings:
|
mappings:
|
||||||
dynamic_templates:
|
dynamic_templates:
|
||||||
@@ -3676,7 +3676,7 @@ elasticsearch:
|
|||||||
index_sorting: False
|
index_sorting: False
|
||||||
index_template:
|
index_template:
|
||||||
index_patterns:
|
index_patterns:
|
||||||
- so-redis*
|
- logs-redis-default*
|
||||||
template:
|
template:
|
||||||
mappings:
|
mappings:
|
||||||
dynamic_templates:
|
dynamic_templates:
|
||||||
@@ -4178,7 +4178,7 @@ elasticsearch:
|
|||||||
index_template:
|
index_template:
|
||||||
data_stream: {}
|
data_stream: {}
|
||||||
index_patterns:
|
index_patterns:
|
||||||
- logs-*-strelka_so
|
- logs-strelka-so*
|
||||||
template:
|
template:
|
||||||
mappings:
|
mappings:
|
||||||
dynamic_templates:
|
dynamic_templates:
|
||||||
@@ -4263,7 +4263,7 @@ elasticsearch:
|
|||||||
index_sorting: False
|
index_sorting: False
|
||||||
index_template:
|
index_template:
|
||||||
index_patterns:
|
index_patterns:
|
||||||
- so-syslog*
|
- logs-syslog-so*
|
||||||
template:
|
template:
|
||||||
mappings:
|
mappings:
|
||||||
dynamic_templates:
|
dynamic_templates:
|
||||||
@@ -4432,7 +4432,7 @@ elasticsearch:
|
|||||||
index_template:
|
index_template:
|
||||||
data_stream: {}
|
data_stream: {}
|
||||||
index_patterns:
|
index_patterns:
|
||||||
- logs-*-zeek_so
|
- logs-zeek-so*
|
||||||
template:
|
template:
|
||||||
mappings:
|
mappings:
|
||||||
dynamic_templates:
|
dynamic_templates:
|
||||||
|
|||||||
Reference in New Issue
Block a user