diff --git a/salt/elasticsearch/soc_elasticsearch.yaml b/salt/elasticsearch/soc_elasticsearch.yaml index d66312a01..c54e07660 100644 --- a/salt/elasticsearch/soc_elasticsearch.yaml +++ b/salt/elasticsearch/soc_elasticsearch.yaml @@ -318,6 +318,7 @@ elasticsearch: so-logs-windows_x_powershell: *indexSettings so-logs-windows_x_powershell_operational: *indexSettings so-logs-windows_x_sysmon_operational: *indexSettings + so-logs-winlog_x_winlog: *indexSettings so-logs-apache_x_access: *indexSettings so-logs-apache_x_error: *indexSettings so-logs-auditd_x_log: *indexSettings @@ -346,6 +347,12 @@ elasticsearch: so-logs-cisco_ftd_x_log: *indexSettings so-logs-cisco_ios_x_log: *indexSettings so-logs-cisco_ise_x_log: *indexSettings + so-logs-citrix_adc_x_interface: *indexSettings + so-logs-citrix_adc_x_lbvserver: *indexSettings + so-logs-citrix_adc_x_service: *indexSettings + so-logs-citrix_adc_x_system: *indexSettings + so-logs-citrix_adc_x_vpn: *indexSettings + so-logs-citrix_waf_x_log: *indexSettings so-logs-cloudflare_x_audit: *indexSettings so-logs-cloudflare_x_logpull: *indexSettings so-logs-crowdstrike_x_falcon: *indexSettings @@ -406,6 +413,8 @@ elasticsearch: so-logs-mysql_x_error: *indexSettings so-logs-mysql_x_slowlog: *indexSettings so-logs-netflow_x_log: *indexSettings + so-logs-nginx_x_access: *indexSettings + so-logs-nginx_x_error: *indexSettings so-logs-o365_x_audit: *indexSettings so-logs-okta_x_system: *indexSettings so-logs-panw_x_panos: *indexSettings @@ -471,6 +480,7 @@ elasticsearch: so-metrics-endpoint_x_metadata: *indexSettings so-metrics-endpoint_x_metrics: *indexSettings so-metrics-endpoint_x_policy: *indexSettings + so-metrics-nginx_x_stubstatus: *indexSettings so-case: *indexSettings so-common: *indexSettings so-endgame: *indexSettings