Merge pull request #7119 from Security-Onion-Solutions/feature/dtc_additional

Add additional scan and rule fileset mappings
This commit is contained in:
weslambert
2022-02-04 14:14:20 -05:00
committed by GitHub
2 changed files with 50 additions and 0 deletions

View File

@@ -0,0 +1,19 @@
{
"_meta": {
"documentation": "https://www.elastic.co/guide/en/ecs/current/ecs-file.html",
"ecs_version": "1.12.2"
},
"template": {
"mappings": {
"properties": {
"rule":{
"properties":{
"score":{
"type":"long"
}
}
}
}
}
}
}

View File

@@ -0,0 +1,31 @@
{
"_meta": {
"documentation": "https://www.elastic.co/guide/en/ecs/current/ecs-file.html",
"ecs_version": "1.12.2"
},
"template": {
"mappings": {
"properties": {
"scan":{
"type":"object",
"properties":{
"exiftool":{
"type":"text"
},
"pe":{
"properties":{
"sections":{
"properties":{
"entropy":{
"type": "float"
}
}
}
}
}
}
}
}
}
}
}