mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2026-01-01 05:43:11 +01:00
298 lines
8.7 KiB
JSON
298 lines
8.7 KiB
JSON
{
|
|
"_meta": {
|
|
"documentation": "https://www.elastic.co/guide/en/ecs/current/ecs-base.html",
|
|
"ecs_version": "1.12.2"
|
|
},
|
|
"template": {
|
|
"settings": {
|
|
"analysis": {
|
|
"analyzer": {
|
|
"es_security_analyzer": {
|
|
"type": "custom",
|
|
"char_filter": [
|
|
"whitespace_no_way"
|
|
],
|
|
"filter": [
|
|
"lowercase",
|
|
"trim"
|
|
],
|
|
"tokenizer": "keyword"
|
|
}
|
|
},
|
|
"char_filter": {
|
|
"whitespace_no_way": {
|
|
"type": "pattern_replace",
|
|
"pattern": "(\\s)+",
|
|
"replacement": "$1"
|
|
}
|
|
},
|
|
"filter": {
|
|
"path_hierarchy_pattern_filter": {
|
|
"type": "pattern_capture",
|
|
"preserve_original": true,
|
|
"patterns": [
|
|
"((?:[^\\\\]*\\\\)*)(.*)",
|
|
"((?:[^/]*/)*)(.*)"
|
|
]
|
|
}
|
|
},
|
|
"tokenizer": {
|
|
"path_tokenizer": {
|
|
"type": "path_hierarchy",
|
|
"delimiter": "\\"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
"mappings": {
|
|
"properties": {
|
|
"snyk": {
|
|
"properties": {
|
|
"audit": {
|
|
"properties": {
|
|
"content": {
|
|
"type": "flattened"
|
|
},
|
|
"org_id": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword",
|
|
"fields": {
|
|
"security": {
|
|
"type": "text",
|
|
"analyzer": "es_security_analyzer"
|
|
}
|
|
}
|
|
},
|
|
"project_id": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword",
|
|
"fields": {
|
|
"security": {
|
|
"type": "text",
|
|
"analyzer": "es_security_analyzer"
|
|
}
|
|
}
|
|
}
|
|
}
|
|
},
|
|
"projects": {
|
|
"type": "flattened"
|
|
},
|
|
"related": {
|
|
"properties": {
|
|
"projects": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword",
|
|
"fields": {
|
|
"security": {
|
|
"type": "text",
|
|
"analyzer": "es_security_analyzer"
|
|
}
|
|
}
|
|
}
|
|
}
|
|
},
|
|
"vulnerabilities": {
|
|
"properties": {
|
|
"credit": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword",
|
|
"fields": {
|
|
"security": {
|
|
"type": "text",
|
|
"analyzer": "es_security_analyzer"
|
|
}
|
|
}
|
|
},
|
|
"cvss3": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword",
|
|
"fields": {
|
|
"security": {
|
|
"type": "text",
|
|
"analyzer": "es_security_analyzer"
|
|
}
|
|
}
|
|
},
|
|
"disclosure_time": {
|
|
"type": "date"
|
|
},
|
|
"exploit_maturity": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword",
|
|
"fields": {
|
|
"security": {
|
|
"type": "text",
|
|
"analyzer": "es_security_analyzer"
|
|
}
|
|
}
|
|
},
|
|
"id": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword",
|
|
"fields": {
|
|
"security": {
|
|
"type": "text",
|
|
"analyzer": "es_security_analyzer"
|
|
}
|
|
}
|
|
},
|
|
"identifiers": {
|
|
"properties": {
|
|
"alternative": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword",
|
|
"fields": {
|
|
"security": {
|
|
"type": "text",
|
|
"analyzer": "es_security_analyzer"
|
|
}
|
|
}
|
|
},
|
|
"cwe": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword",
|
|
"fields": {
|
|
"security": {
|
|
"type": "text",
|
|
"analyzer": "es_security_analyzer"
|
|
}
|
|
}
|
|
}
|
|
}
|
|
},
|
|
"introduced_date": {
|
|
"type": "date"
|
|
},
|
|
"is_fixed": {
|
|
"type": "boolean"
|
|
},
|
|
"is_ignored": {
|
|
"type": "boolean"
|
|
},
|
|
"is_patchable": {
|
|
"type": "boolean"
|
|
},
|
|
"is_patched": {
|
|
"type": "boolean"
|
|
},
|
|
"is_pinnable": {
|
|
"type": "boolean"
|
|
},
|
|
"is_upgradable": {
|
|
"type": "boolean"
|
|
},
|
|
"jira_issue_url": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword",
|
|
"fields": {
|
|
"security": {
|
|
"type": "text",
|
|
"analyzer": "es_security_analyzer"
|
|
}
|
|
}
|
|
},
|
|
"language": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword",
|
|
"fields": {
|
|
"security": {
|
|
"type": "text",
|
|
"analyzer": "es_security_analyzer"
|
|
}
|
|
}
|
|
},
|
|
"original_severity": {
|
|
"type": "long"
|
|
},
|
|
"package": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword",
|
|
"fields": {
|
|
"security": {
|
|
"type": "text",
|
|
"analyzer": "es_security_analyzer"
|
|
}
|
|
}
|
|
},
|
|
"package_manager": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword",
|
|
"fields": {
|
|
"security": {
|
|
"type": "text",
|
|
"analyzer": "es_security_analyzer"
|
|
}
|
|
}
|
|
},
|
|
"patches": {
|
|
"type": "flattened"
|
|
},
|
|
"priority_score": {
|
|
"type": "long"
|
|
},
|
|
"publication_time": {
|
|
"type": "date"
|
|
},
|
|
"reachability": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword",
|
|
"fields": {
|
|
"security": {
|
|
"type": "text",
|
|
"analyzer": "es_security_analyzer"
|
|
}
|
|
}
|
|
},
|
|
"semver": {
|
|
"type": "flattened"
|
|
},
|
|
"title": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword",
|
|
"fields": {
|
|
"security": {
|
|
"type": "text",
|
|
"analyzer": "es_security_analyzer"
|
|
}
|
|
}
|
|
},
|
|
"type": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword",
|
|
"fields": {
|
|
"security": {
|
|
"type": "text",
|
|
"analyzer": "es_security_analyzer"
|
|
}
|
|
}
|
|
},
|
|
"unique_severities_list": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword",
|
|
"fields": {
|
|
"security": {
|
|
"type": "text",
|
|
"analyzer": "es_security_analyzer"
|
|
}
|
|
}
|
|
},
|
|
"version": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword",
|
|
"fields": {
|
|
"security": {
|
|
"type": "text",
|
|
"analyzer": "es_security_analyzer"
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|