From 5547a1b7ab54d8ccd068cf7989bef020b58bb365 Mon Sep 17 00:00:00 2001 From: Wes Date: Tue, 13 Jun 2023 18:23:50 +0000 Subject: [PATCH] Add event mappings --- salt/elasticsearch/defaults.yaml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/salt/elasticsearch/defaults.yaml b/salt/elasticsearch/defaults.yaml index 4f4f5a295..54cae64a9 100644 --- a/salt/elasticsearch/defaults.yaml +++ b/salt/elasticsearch/defaults.yaml @@ -121,6 +121,7 @@ elasticsearch: index: number_of_replicas: 0 composed_of: + - "event-mappings" - "logs-system.auth@package" - "logs-system.auth@custom" - "so-fleet_globals-1" @@ -139,6 +140,7 @@ elasticsearch: index: number_of_replicas: 0 composed_of: + - "event-mappings" - "logs-system.syslog@package" - "logs-system.syslog@custom" - "so-fleet_globals-1" @@ -157,6 +159,7 @@ elasticsearch: index: number_of_replicas: 0 composed_of: + - "event-mappings" - "logs-system.application@package" - "logs-system.application@custom" - "so-fleet_globals-1" @@ -175,6 +178,7 @@ elasticsearch: index: number_of_replicas: 0 composed_of: + - "event-mappings" - "logs-system.security@package" - "logs-system.security@custom" - "so-fleet_globals-1"