Merge pull request #7119 from Security-Onion-Solutions/feature/dtc_additional

Add additional scan and rule fileset mappings

salt/elasticsearch/templates/component/so/so-rule-mappings.json

@@ -0,0 +1,19 @@
+{
+  "_meta": {
+    "documentation": "https://www.elastic.co/guide/en/ecs/current/ecs-file.html",
+    "ecs_version": "1.12.2"
+  },
+  "template": {
+    "mappings": {
+      "properties": {
+        "rule":{
+  	  "properties":{
+    	    "score":{
+      	      "type":"long"
+    	    }
+  	  }
+	}
+      }
+    }
+  }
+}

salt/elasticsearch/templates/component/so/so-scan-mappings.json

@@ -0,0 +1,31 @@
+{
+  "_meta": {
+    "documentation": "https://www.elastic.co/guide/en/ecs/current/ecs-file.html",
+    "ecs_version": "1.12.2"
+  },
+  "template": {
+    "mappings": {
+      "properties": {
+        "scan":{
+  	  "type":"object",
+  	  "properties":{
+    	    "exiftool":{
+      	      "type":"text"
+    	    },
+    	    "pe":{
+              "properties":{
+                "sections":{
+                  "properties":{
+                    "entropy":{
+                      "type": "float"
+            	    }
+          	  }
+        	}
+      	      }
+    	    }
+  	  }
+	}
+      }
+    }
+  }
+}