CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-08 10:12:53 +01:00
Code Issues Packages Projects Releases Wiki Activity

Add event.acknowledged and event.escalated mappings

Browse Source
This commit is contained in:
weslambert
2022-01-10 16:08:35 -05:00
committed by GitHub
parent b7a90a88f9
commit 84f7c6b13b
1 changed files with 16 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
salt/elasticsearch/templates/so/so-common-template.json.jinja
View File

@@ -291,6 +291,14 @@
}, },
"event": { "event": {
"properties": { "properties": {
"acknowledged": {
"type": "boolean",
"fields": {
"keyword": {
"type": "keyword"
}
}
},
"action": { "action": {
"ignore_above": 1024, "ignore_above": 1024,
"type": "keyword" "type": "keyword"
@@ -331,6 +339,14 @@
"end": { "end": {
"type": "date" "type": "date"
}, },
"escalated": {
"type": "boolean",
"fields": {
"keyword": {
"type": "keyword"
}
}
},
"hash": { "hash": {
"ignore_above": 1024, "ignore_above": 1024,
"type": "keyword" "type": "keyword"