From 84f7c6b13bc1753315031b7720f8efc8c1ca28d4 Mon Sep 17 00:00:00 2001 From: weslambert Date: Mon, 10 Jan 2022 16:08:35 -0500 Subject: [PATCH] Add event.acknowledged and event.escalated mappings --- .../templates/so/so-common-template.json.jinja | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) diff --git a/salt/elasticsearch/templates/so/so-common-template.json.jinja b/salt/elasticsearch/templates/so/so-common-template.json.jinja index c421e740e..b61f3764d 100644 --- a/salt/elasticsearch/templates/so/so-common-template.json.jinja +++ b/salt/elasticsearch/templates/so/so-common-template.json.jinja @@ -291,6 +291,14 @@ }, "event": { "properties": { + "acknowledged": { + "type": "boolean", + "fields": { + "keyword": { + "type": "keyword" + } + } + }, "action": { "ignore_above": 1024, "type": "keyword" @@ -331,6 +339,14 @@ "end": { "type": "date" }, + "escalated": { + "type": "boolean", + "fields": { + "keyword": { + "type": "keyword" + } + } + }, "hash": { "ignore_above": 1024, "type": "keyword"