Merge pull request #5401 from rwaight/dev

Enable index sorting in `so-common-template.json`
This commit is contained in:
Mike Reeves
2021-09-04 10:32:57 -04:00
committed by GitHub

View File

@@ -8,6 +8,8 @@
"index.refresh_interval":"30s", "index.refresh_interval":"30s",
"index.routing.allocation.require.box_type":"hot", "index.routing.allocation.require.box_type":"hot",
"index.mapping.total_fields.limit": "1500", "index.mapping.total_fields.limit": "1500",
"index.sort.field": "@timestamp",
"index.sort.order": "desc",
"analysis": { "analysis": {
"analyzer": { "analyzer": {
"es_security_analyzer": { "es_security_analyzer": {