Merge pull request #4098 from Security-Onion-Solutions/delta

Add ignore above for message keyword field
2026-01-26 09:53:30 +01:00 · 2021-05-05 08:53:39 -04:00
parent d4e8ea8e72 a1a79719fc
commit c867d6648a
1 changed files with 2 additions and 1 deletions
--- a/salt/elasticsearch/templates/so/so-common-template.json
+++ b/salt/elasticsearch/templates/so/so-common-template.json
@@ -320,7 +320,8 @@
          "type":"text",
          "fields":{  
            "keyword":{  
-              "type":"keyword"
+              "type":"keyword",
+	      "ignore_above": 32766
            }
          }
        },