Prefix all SO fields to avoid potential conflicts with future ECS changes

This commit is contained in:
Jason Ertel
2022-01-19 14:26:22 -05:00
parent d7ba1cedff
commit dc44a91398
4 changed files with 14 additions and 14 deletions

View File

@@ -36,11 +36,11 @@
"@timestamp": {
"type": "date"
},
"kind": {
"so_kind": {
"type": "keyword",
"ignore_above": 1024
},
"operation": {
"so_operation": {
"type": "keyword",
"ignore_above": 1024
},
@@ -48,7 +48,7 @@
"type": "keyword",
"ignore_above": 1024
},
"artifact": {
"so_artifact": {
"properties": {
"artifactType": {
"type": "keyword",
@@ -121,7 +121,7 @@
}
}
},
"artifactstream": {
"so_artifactstream": {
"properties": {
"content": {
"type": "text"
@@ -135,7 +135,7 @@
}
}
},
"case": {
"so_case": {
"properties": {
"assigneeId": {
"type": "keyword",
@@ -193,7 +193,7 @@
}
}
},
"comment": {
"so_comment": {
"properties": {
"caseId": {
"type": "keyword",
@@ -211,7 +211,7 @@
}
}
},
"related": {
"so_related": {
"properties": {
"caseId": {
"type": "keyword",