Add keyword subfield for event.module

2025-12-11 03:32:53 +01:00 · 2021-10-15 13:29:50 -04:00
parent 6f1f7d2a63
commit 59852841ff
1 changed files with 6 additions and 1 deletions
--- a/salt/elasticsearch/templates/so/so-endgame-template.json.jinja
+++ b/salt/elasticsearch/templates/so/so-endgame-template.json.jinja
@@ -719,7 +719,12 @@
          },
          "module": {
            "ignore_above": 1024,
-            "type": "keyword"
+            "type": "keyword",
+            "fields": {
+              "keyword": {
+                "type": "keyword"
+              }
+            }
          },
          "original": {
            "doc_values": false,