From 71ae5b60eac6649890a5e33e1c709379e6ef8a43 Mon Sep 17 00:00:00 2001
From: Josh Brower <Josh@Defensivedepth.com>
Date: Tue, 16 Mar 2021 09:32:40 -0400
Subject: [PATCH] Update Sigmac mappings and config for IPs and ports

---
 salt/elasticsearch/templates/so/so-common-template.json | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/salt/elasticsearch/templates/so/so-common-template.json b/salt/elasticsearch/templates/so/so-common-template.json
index 5e05896c3..ebf123fed 100644
--- a/salt/elasticsearch/templates/so/so-common-template.json
+++ b/salt/elasticsearch/templates/so/so-common-template.json
@@ -64,13 +64,12 @@
        },
        {
           "port": {
-            "match_mapping_type": "string",
             "path_match": "*.port",
             "mapping": {
               "type": "integer",
               "fields" : {
                 "keyword" : {
-                  "ignore_above" : 10,
+                  "ignore_above" : 6,
                   "type" : "keyword"
                 }
               }