mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-06 09:12:45 +01:00
86 lines
2.2 KiB
JSON
86 lines
2.2 KiB
JSON
{
|
|
"_meta": {
|
|
"documentation": "https://www.elastic.co/guide/en/ecs/current/ecs-log.html",
|
|
"ecs_version": "1.12.2"
|
|
},
|
|
"template": {
|
|
"mappings": {
|
|
"properties": {
|
|
"log": {
|
|
"properties": {
|
|
"file": {
|
|
"properties": {
|
|
"path": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"level": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"logger": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"origin": {
|
|
"properties": {
|
|
"file": {
|
|
"properties": {
|
|
"line": {
|
|
"type": "long"
|
|
},
|
|
"name": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"function": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"original": {
|
|
"doc_values": false,
|
|
"index": false,
|
|
"type": "keyword"
|
|
},
|
|
"syslog": {
|
|
"properties": {
|
|
"facility": {
|
|
"properties": {
|
|
"code": {
|
|
"type": "long"
|
|
},
|
|
"name": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"priority": {
|
|
"type": "long"
|
|
},
|
|
"severity": {
|
|
"properties": {
|
|
"code": {
|
|
"type": "long"
|
|
},
|
|
"name": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
"type": "object"
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
} |