CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 17:22:49 +01:00
Code Issues Packages Projects Releases Wiki Activity

Additional .keyword changes for host.hostname client.address, and event.action

Browse Source
This commit is contained in:
Wes Lambert
2022-03-02 21:54:46 +00:00
parent 3ee46e4c29
commit 8f97f09c9c
2 changed files with 27 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
salt/elasticsearch/templates/component/so/dtc-event-mappings.json
View File

@@ -48,6 +48,19 @@
"properties": { "properties": {
"event": { "event": {
"properties": { "properties": {
"action": {
"ignore_above": 1024,
"type": "keyword",
"fields": {
"security": {
"type": "text",
"analyzer": "es_security_analyzer"
},
"keyword": {
"type": "keyword"
}
}
},
"category": { "category": {
"ignore_above": 1024, "ignore_above": 1024,
"type": "keyword", "type": "keyword",

15
salt/elasticsearch/templates/component/so/dtc-host-mappings.json
View File

@@ -48,7 +48,20 @@
"properties": { "properties": {
"host": { "host": {
"properties": { "properties": {
"name": { "hostname": {
"ignore_above": 1024,
"type": "keyword",
"fields": {
"security": {
"type": "text",
"analyzer": "es_security_analyzer"
},
"keyword": {
"type": "keyword"
}
}
},
"name": {
"ignore_above": 1024, "ignore_above": 1024,
"type": "keyword", "type": "keyword",
"fields": { "fields": {