mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2026-01-12 19:21:23 +01:00
57 lines
1.6 KiB
JSON
57 lines
1.6 KiB
JSON
{
|
|
"template": {
|
|
"mappings": {
|
|
"dynamic_templates": [
|
|
{
|
|
"ip_address": {
|
|
"path_match": "*.ip",
|
|
"mapping": {
|
|
"type": "ip",
|
|
"fields": {
|
|
"keyword": {
|
|
"ignore_above": 45,
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"match_mapping_type": "string"
|
|
}
|
|
},
|
|
{
|
|
"port": {
|
|
"path_match": "*.port",
|
|
"path_unmatch": "*.data.port",
|
|
"mapping": {
|
|
"type": "integer",
|
|
"fields": {
|
|
"keyword": {
|
|
"ignore_above": 6,
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"strings": {
|
|
"mapping": {
|
|
"type": "text",
|
|
"fields": {
|
|
"security": {
|
|
"analyzer": "es_security_analyzer",
|
|
"type": "text"
|
|
},
|
|
"keyword": {
|
|
"ignore_above": 32765,
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"match_mapping_type": "string"
|
|
}
|
|
}
|
|
]
|
|
}
|
|
}
|
|
}
|