CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 17:22:49 +01:00
Code Issues Packages Projects Releases Wiki Activity

Add 'event.created' and 'event.ingested' keyword mapping

Browse Source
This commit is contained in:
Wes Lambert
2022-02-08 21:34:32 +00:00
parent c216457a3e
commit 9b841fd872
1 changed files with 12 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
salt/elasticsearch/templates/component/so/dtc-event-mappings
View File

@@ -30,7 +30,12 @@
"type": "keyword" "type": "keyword"
}, },
"created": { "created": {
"type": "date" "type": "date",
"fields": {
"keyword": {
"type": "keyword"
}
}
}, },
"dataset": { "dataset": {
"ignore_above": 1024, "ignore_above": 1024,
@@ -56,7 +61,12 @@
"type": "keyword" "type": "keyword"
}, },
"ingested": { "ingested": {
"type": "date" "type": "date",
"fields": {
"keyword": {
"type": "keyword"
}
}
}, },
"kind": { "kind": {
"ignore_above": 1024, "ignore_above": 1024,