diff --git a/salt/elasticsearch/soc_elasticsearch.yaml b/salt/elasticsearch/soc_elasticsearch.yaml index 95880bb9d..995dcd38a 100644 --- a/salt/elasticsearch/soc_elasticsearch.yaml +++ b/salt/elasticsearch/soc_elasticsearch.yaml @@ -645,6 +645,9 @@ elasticsearch: global: True advanced: True helpLink: elasticsearch + so-assistant-chat: *dataStreamSettings + so-assistant-session: *dataStreamSettings + so-elastic-agent-monitor: *dataStreamSettings so-logs-soc: *dataStreamSettings so-logs-system_x_auth: *dataStreamSettings so-logs-system_x_syslog: *dataStreamSettings @@ -667,7 +670,10 @@ elasticsearch: so-logs-elastic_agent_x_auditbeat: *dataStreamSettings so-logs-elastic_agent_x_cloudbeat: *dataStreamSettings so-logs-elastic_agent_x_endpoint_security: *dataStreamSettings + so-logs-endpoint_x_actions: *dataStreamSettings + so-logs-endpoint_x_action_x_responses: *dataStreamSettings so-logs-endpoint_x_alerts: *dataStreamSettings + so-logs-endpoint_x_diagnostic_x_collection: *dataStreamSettings so-logs-endpoint_x_events_x_api: *dataStreamSettings so-logs-endpoint_x_events_x_file: *dataStreamSettings so-logs-endpoint_x_events_x_library: *dataStreamSettings @@ -675,6 +681,7 @@ elasticsearch: so-logs-endpoint_x_events_x_process: *dataStreamSettings so-logs-endpoint_x_events_x_registry: *dataStreamSettings so-logs-endpoint_x_events_x_security: *dataStreamSettings + so-logs-endpoint_x_heartbeat: *dataStreamSettings so-logs-elastic_agent_x_filebeat: *dataStreamSettings so-logs-elastic_agent_x_fleet_server: *dataStreamSettings so-logs-elastic_agent_x_heartbeat: *dataStreamSettings @@ -987,8 +994,6 @@ elasticsearch: helpLink: elasticsearch sos-backup: *indexSettings so-detection: *indexSettings - so-assistant-chat: *indexSettings - so-assistant-session: *indexSettings so-metrics-fleet_server_x_agent_status: &fleetMetricsSettings index_sorting: description: Sorts the index by event time, at the cost of additional processing resource consumption.