securityonion/salt/elasticsearch/templates/component/elastic-agent/logs-system.syslog@custom.json

{
  "template": {
    "mappings": {
      "properties": {
        "error": {
          "properties": {
            "message": {
              "type": "match_only_text"
            }
	  }
	}
      }
    }
  },
  "_meta": {
    "package": {
      "name": "system"
    },
    "managed_by": "fleet",
    "managed": true
  }
}