CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 09:12:45 +01:00
Code Issues Packages Projects Releases Wiki Activity

Add 'event.created' and 'event.ingested' keyword mapping

Browse Source
This commit is contained in:
Wes Lambert
2022-02-08 21:34:32 +00:00
parent c216457a3e
commit 9b841fd872
1 changed files with 12 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
salt/elasticsearch/templates/component/so/dtc-event-mappings
View File

@@ -30,7 +30,12 @@
"type": "keyword"
},
"created": {
"type": "date"
"type": "date",
"fields": {
"keyword": {
"type": "keyword"
}
}
},
"dataset": {
"ignore_above": 1024,
@@ -56,7 +61,12 @@
"type": "keyword"
},
"ingested": {
"type": "date"
"type": "date",
"fields": {
"keyword": {
"type": "keyword"
}
}
},
"kind": {
"ignore_above": 1024,