From c89d674a92d8a8d3bfea01b27790e60fcdd9c656 Mon Sep 17 00:00:00 2001 From: Wes Date: Thu, 11 Jan 2024 14:18:06 +0000 Subject: [PATCH] Add settings for integrations --- salt/elasticsearch/soc_elasticsearch.yaml | 13 +++++++++++++ 1 file changed, 13 insertions(+) diff --git a/salt/elasticsearch/soc_elasticsearch.yaml b/salt/elasticsearch/soc_elasticsearch.yaml index 0b93a6c1a..d465a8487 100644 --- a/salt/elasticsearch/soc_elasticsearch.yaml +++ b/salt/elasticsearch/soc_elasticsearch.yaml @@ -343,6 +343,9 @@ elasticsearch: so-logs-azure_x_springcloudlogs: *indexSettings so-logs-barracuda_x_waf: *indexSettings so-logs-cisco_asa_x_log: *indexSettings + so-logs-cisco_ftd_x_log: *indexSettings + so-logs-cisco_ios_x_log: *indexSettings + so-logs-cisco_ise_x_log: *indexSettings so-logs-cloudflare_x_audit: *indexSettings so-logs-cloudflare_x_logpull: *indexSettings so-logs-crowdstrike_x_falcon: *indexSettings @@ -383,6 +386,8 @@ elasticsearch: so-logs-google_workspace_x_user_accounts: *indexSettings so-logs-http_endpoint_x_generic: *indexSettings so-logs-httpjson_x_generic: *indexSettings + so-logs-iis_x_access: *indexSettings + so-logs-iis_x_error: *indexSettings so-logs-juniper_x_junos: *indexSettings so-logs-juniper_x_netscreen: *indexSettings so-logs-juniper_x_srx: *indexSettings @@ -396,11 +401,19 @@ elasticsearch: so-logs-m365_defender_x_log: *indexSettings so-logs-microsoft_defender_endpoint_x_log: *indexSettings so-logs-microsoft_dhcp_x_log: *indexSettings + so-logs-microsoft_sqlserver_x_audit: *indexSettings + so-logs-microsoft_sqlserver_x_log: *indexSettings + so-logs-mysql_x_error: *indexSettings + so-logs-mysql_x_slowlog: *indexSettings so-logs-netflow_x_log: *indexSettings so-logs-o365_x_audit: *indexSettings so-logs-okta_x_system: *indexSettings so-logs-panw_x_panos: *indexSettings so-logs-pfsense_x_log: *indexSettings + so-logs-proofpoint_tap_x_clicks_blocked: *indexSettings + so-logs-proofpoint_tap_x_clicks_permitted: *indexSettings + so-logs-proofpoint_tap_x_message_blocked: *indexSettings + so-logs-proofpoint_tap_x_message_delivered: *indexSettings so-logs-sentinel_one_x_activity: *indexSettings so-logs-sentinel_one_x_agent: *indexSettings so-logs-sentinel_one_x_alert: *indexSettings