From b874619f0dbc5234730770ab99d48f1aa5d84395 Mon Sep 17 00:00:00 2001
From: Joshua Brower <josh@defensivedepth.com>
Date: Mon, 3 Feb 2025 09:31:08 -0500
Subject: [PATCH] Fix ip-mappings ILM

---
 salt/elasticsearch/defaults.yaml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/salt/elasticsearch/defaults.yaml b/salt/elasticsearch/defaults.yaml
index ffb302977..9c3d11c75 100644
--- a/salt/elasticsearch/defaults.yaml
+++ b/salt/elasticsearch/defaults.yaml
@@ -638,12 +638,19 @@ elasticsearch:
               mapping:
                 total_fields:
                   limit: 1500
+              lifecycle:
+                name: so-ip-mappings-logs
               number_of_replicas: 0
               number_of_shards: 1
               refresh_interval: 30s
               sort:
                 field: '@timestamp'
                 order: desc
+      policy:
+        phases:
+          hot:
+            actions: {}
+            min_age: 0ms
     so-items:
       index_sorting: false
       index_template: