mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2026-01-03 06:43:20 +01:00
53 lines
1.3 KiB
JSON
53 lines
1.3 KiB
JSON
{
|
|
"template": {
|
|
"mappings": {
|
|
"properties": {
|
|
"endgame": {
|
|
"dynamic": false,
|
|
"properties": {
|
|
"data": {
|
|
"properties": {
|
|
"malware_classification": {
|
|
"properties": {
|
|
"identifier": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"quarantine_result": {
|
|
"properties": {
|
|
"local_msg": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
}
|
|
}
|
|
},
|
|
"event_subtype_full": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"event_type_full": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"metadata": {
|
|
"properties": {
|
|
"type": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
"type": "object"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
"_meta": {
|
|
"ecs_version": "1.12.2"
|
|
}
|
|
} |