CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-08 02:02:50 +01:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #6995 from Security-Onion-Solutions/kilo

Browse Source 
store related event data as a flattened object blob
This commit is contained in:
Jason Ertel
2022-01-26 12:21:02 -05:00
committed by GitHub
parent 26e03ccad2 ed9b74dc33
commit c2636036ee
1 changed files with 9 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
salt/elasticsearch/templates/so/so-case-template.json.jinja
View File

@@ -210,6 +210,15 @@
"createTime": { "createTime": {
"type": "date" "type": "date"
}, },
"fields": {
"eager_global_ordinals": false,
"ignore_above": 1024,
"index": true,
"type": "flattened",
"index_options": "docs",
"split_queries_on_whitespace": false,
"doc_values": true
},
"userId": { "userId": {
"type": "keyword", "type": "keyword",
"ignore_above": 1024 "ignore_above": 1024