mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2026-01-14 20:21:24 +01:00
75 lines
1.9 KiB
JSON
75 lines
1.9 KiB
JSON
{
|
|
"_meta": {
|
|
"documentation": "https://www.elastic.co/guide/en/ecs/current/ecs-base.html",
|
|
"ecs_version": "1.12.2"
|
|
},
|
|
"template": {
|
|
"mappings": {
|
|
"properties": {
|
|
"kibana": {
|
|
"properties": {
|
|
"add_to_spaces": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"authentication_provider": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"authentication_realm": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"authentication_type": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"delete_from_spaces": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"log": {
|
|
"properties": {
|
|
"meta": {
|
|
"type": "object"
|
|
},
|
|
"state": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"tags": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"lookup_realm": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"saved_object": {
|
|
"properties": {
|
|
"id": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"type": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"session_id": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"space_id": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
} |