suricata.capture_file keyword

2025-12-07 17:52:46 +01:00 · 2025-11-20 14:26:12 -06:00
parent 6f42ff3442
commit c5db7c8752
1 changed files with 4 additions and 0 deletions
--- a/salt/elasticsearch/templates/component/ecs/suricata.json
+++ b/salt/elasticsearch/templates/component/ecs/suricata.json
@@ -841,6 +841,10 @@
                  "type": "long"
                }
              }
+            },
+            "capture_file": {
+                "type": "keyword",
+                "ignore_above": 1024
            }
          }
        }