From 00cea6fb80f06248746cb709fd26b16590ee22ad Mon Sep 17 00:00:00 2001
From: Corey Ogburn <corey.ogburn@securityonionsolutions.com>
Date: Fri, 5 Apr 2024 11:22:47 -0600
Subject: [PATCH] Detection Author as a Keyword instead of Text

With Quick Actions added to Detections, as many fields should be usable as possible.
---
 .../templates/component/so/detection-mappings.json             | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/salt/elasticsearch/templates/component/so/detection-mappings.json b/salt/elasticsearch/templates/component/so/detection-mappings.json
index 9b68421e7..105a0ead2 100644
--- a/salt/elasticsearch/templates/component/so/detection-mappings.json
+++ b/salt/elasticsearch/templates/component/so/detection-mappings.json
@@ -30,7 +30,8 @@
               "type": "keyword"
             },
             "author": {
-              "type": "text"
+              "ignore_above": 1024,
+              "type": "keyword"
             },
             "description": {
               "type": "text"