diff --git a/salt/elasticsearch/templates/so/so-common-template.json.jinja b/salt/elasticsearch/templates/so/so-common-template.json.jinja index 3e1fa21e5..11871bfc6 100644 --- a/salt/elasticsearch/templates/so/so-common-template.json.jinja +++ b/salt/elasticsearch/templates/so/so-common-template.json.jinja @@ -397,7 +397,12 @@ }, "severity_label": { "ignore_above": 1024, - "type": "keyword" + "type": "keyword". + "fields": { + "keyword": { + "type": "keyword" + } + } }, "start": { "type": "date"