From 9b841fd872b6be8aeb2a8fbe8b90d81b6821dcbc Mon Sep 17 00:00:00 2001
From: Wes Lambert <wlambertts@gmail.com>
Date: Tue, 8 Feb 2022 21:34:32 +0000
Subject: [PATCH] Add 'event.created' and 'event.ingested' keyword mapping

---
 .../templates/component/so/dtc-event-mappings      | 14 ++++++++++++--
 1 file changed, 12 insertions(+), 2 deletions(-)

diff --git a/salt/elasticsearch/templates/component/so/dtc-event-mappings b/salt/elasticsearch/templates/component/so/dtc-event-mappings
index 1b4798487..8a026308b 100644
--- a/salt/elasticsearch/templates/component/so/dtc-event-mappings
+++ b/salt/elasticsearch/templates/component/so/dtc-event-mappings
@@ -30,7 +30,12 @@
               "type": "keyword"
             },
             "created": {
-              "type": "date"
+              "type": "date",
+              "fields": {
+                "keyword": {
+                  "type": "keyword"
+                }
+              }
             },
             "dataset": {
               "ignore_above": 1024,
@@ -56,7 +61,12 @@
               "type": "keyword"
             },
             "ingested": {
-              "type": "date"
+              "type": "date",
+              "fields": {
+                "keyword": {
+                  "type": "keyword"
+                }
+              }
             },
             "kind": {
               "ignore_above": 1024,