CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 17:22:49 +01:00
Code Issues Packages Projects Releases Wiki Activity

remove unused fields object from related case schema

Browse Source
This commit is contained in:
Jason Ertel
2022-01-19 08:39:21 -05:00
parent a3925d231c
commit d7ba1cedff
1 changed files with 0 additions and 50 deletions
Download Patch File Download Diff File Expand all files Collapse all files

50
salt/elasticsearch/templates/so/so-case-template.json.jinja
View File

@@ -220,56 +220,6 @@
"createTime": { "createTime": {
"type": "date" "type": "date"
}, },
"fields": {
"properties": {
"@timestamp": {
"type": "date"
},
"event": {
"properties": {
"dataset": {
"type": "keyword",
"ignore_above": 1024
},
"module": {
"type": "keyword",
"ignore_above": 1024
},
"category": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"message": {
"type": "text"
},
"scan":{
"type":"object",
"dynamic": true,
"properties":{
"exiftool":{
"type":"text"
},
"pe":{
"properties":{
"sections":{
"properties":{
"entropy":{
"type": "float"
}
}
}
}
}
}
},
"tags": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"userId": { "userId": {
"type": "keyword", "type": "keyword",
"ignore_above": 1024 "ignore_above": 1024