CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-11 11:42:50 +01:00
Code Issues Packages Projects Releases Wiki Activity

Update Sigmac mappings and config for IPs and ports

Browse Source
This commit is contained in:
Josh Brower
2021-03-15 15:53:00 -04:00
parent c93aab7a85
commit 5fe025318b
1 changed files with 16 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
salt/elasticsearch/templates/so/so-common-template.json
View File

@@ -51,7 +51,14 @@
"match_mapping_type": "string", "match_mapping_type": "string",
"path_match": "*.ip", "path_match": "*.ip",
"mapping": { "mapping": {
"type": "ip" "type": "ip",
"fields" : {
"keyword" : {
"ignore_above" : 45,
"type" : "keyword"
}
}
} }
} }
}, },
@@ -60,7 +67,14 @@
"match_mapping_type": "string", "match_mapping_type": "string",
"path_match": "*.port", "path_match": "*.port",
"mapping": { "mapping": {
"type": "integer" "type": "integer",
"fields" : {
"keyword" : {
"ignore_above" : 10,
"type" : "keyword"
}
}
} }
} }
}, },