Add keyword subfield for event.severity_label

This commit is contained in:
weslambert authored and GitHub committed 2022-01-07 11:21:57 -05:00
1 parent c69e1353d9
commit 770e53d914
1 file changed
+6 -1
@@ -397,7 +397,12 @@
},
"severity_label": {
"ignore_above": 1024,
"type": "keyword"
"type": "keyword".
"fields": {
"keyword": {
"type": "keyword"
}
}
},
"start": {
"type": "date"