CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 17:22:49 +01:00
Code Issues Packages Projects Releases Wiki Activity

Update agent mappings to include .security

Browse Source
This commit is contained in:
Wes Lambert
2022-03-02 14:25:14 +00:00
parent 2d2ec45029
commit d89af5f04f
1 changed files with 19 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files

33
salt/elasticsearch/templates/component/so/dtc-agent-mappings.json
View File

@@ -12,8 +12,9 @@
"ignore_above": 1024, "ignore_above": 1024,
"type": "keyword", "type": "keyword",
"fields": { "fields": {
"text": { "security": {
"type": "match_only_text" "type": "text",
"analyzer": "es_security_analyzer"
}, },
"keyword": { "keyword": {
"type": "keyword" "type": "keyword"
@@ -24,10 +25,11 @@
"ignore_above": 1024, "ignore_above": 1024,
"type": "keyword", "type": "keyword",
"fields": { "fields": {
"text": { "security": {
"type": "match_only_text" "type": "text",
"analyzer": "es_security_analyzer"
}, },
"keyword": { "keyword": {
"type": "keyword" "type": "keyword"
} }
} }
@@ -36,10 +38,11 @@
"ignore_above": 1024, "ignore_above": 1024,
"type": "keyword", "type": "keyword",
"fields": { "fields": {
"text": { "security": {
"type": "match_only_text" "type": "text",
"analyzer": "es_security_analyzer"
}, },
"keyword": { "keyword": {
"type": "keyword" "type": "keyword"
} }
} }
@@ -48,10 +51,11 @@
"ignore_above": 1024, "ignore_above": 1024,
"type": "keyword", "type": "keyword",
"fields": { "fields": {
"text": { "security": {
"type": "match_only_text" "type": "text",
"analyzer": "es_security_analyzer"
}, },
"keyword": { "keyword": {
"type": "keyword" "type": "keyword"
} }
} }
@@ -60,10 +64,11 @@
"ignore_above": 1024, "ignore_above": 1024,
"type": "keyword", "type": "keyword",
"fields": { "fields": {
"text": { "security": {
"type": "match_only_text" "type": "text",
"analyzer": "es_security_analyzer"
}, },
"keyword": { "keyword": {
"type": "keyword" "type": "keyword"
} }
} }