CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 09:12:45 +01:00
Code Issues Packages Projects Releases Wiki Activity

Update template settings to use data streams

Browse Source
This commit is contained in:
Wes
2023-01-11 14:03:11 +00:00
parent 5062dd2873
commit c3b83f1fc8
1 changed files with 11 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
salt/elasticsearch/defaults.yaml
View File

@@ -1152,8 +1152,9 @@ elasticsearch:
delete: 365
index_sorting: False
index_template:
data_stream: {}
index_patterns:
- so-*
- logs-*_so
template:
mappings:
dynamic_templates:
@@ -2154,11 +2155,12 @@ elasticsearch:
- common-settings
- common-dynamic-mappings
priority: 500
so-ids:
so-suricata:
index_sorting: False
index_template:
data_stream: {}
index_patterns:
- so-ids*
- logs-*-suricata_so
template:
mappings:
dynamic_templates:
@@ -2324,8 +2326,9 @@ elasticsearch:
so-import:
index_sorting: False
index_template:
data_stream: {}
index_patterns:
- so-import*
- logs-*-import_so
template:
mappings:
dynamic_templates:
@@ -4162,8 +4165,9 @@ elasticsearch:
so-strelka:
index_sorting: False
index_template:
data_stream: {}
index_patterns:
- so-strelka*
- logs-*-strelka_so
template:
mappings:
dynamic_templates:
@@ -4415,8 +4419,9 @@ elasticsearch:
so-zeek:
index_sorting: False
index_template:
data_stream: {}
index_patterns:
- so-zeek*
- logs-*-zeek_so
template:
mappings:
dynamic_templates: