Merge pull request #454 from Security-Onion-Solutions/es_template_fix

Add message field
2025-12-08 18:22:47 +01:00 · 2020-03-23 23:39:44 -04:00
parent 126913e41b ece7e139f2
commit a01b0e44e1
1 changed files with 8 additions and 0 deletions
--- a/salt/logstash/pipelines/templates/so/so-common-template.json
+++ b/salt/logstash/pipelines/templates/so/so-common-template.json
@@ -192,6 +192,14 @@
          "type":"object",
          "dynamic": true
        },
+	"message":{  
+          "type":"text",
+          "fields":{  
+            "keyword":{  
+              "type":"keyword"
+            }
+          }
+        },
        "modbus":{
          "type":"object",
          "dynamic": true