securityonion/salt/elasticsearch/templates/component/elastic-agent/so-lists-mappings.json

{
  "template": {
  "mappings": {
    "dynamic": "strict",
    "properties": {
      "created_at": {
        "type": "date"
      },
      "created_by": {
        "type": "keyword"
      },
      "description": {
        "type": "keyword"
      },
      "deserializer": {
        "type": "keyword"
      },
      "immutable": {
        "type": "boolean"
      },
      "meta": {
        "type": "object",
        "enabled": false
      },
      "name": {
        "type": "keyword"
      },
      "serializer": {
        "type": "keyword"
      },
      "tie_breaker_id": {
        "type": "keyword"
      },
      "type": {
        "type": "keyword"
      },
      "updated_at": {
        "type": "date"
      },
      "updated_by": {
        "type": "keyword"
      },
      "version": {
        "type": "keyword"
      }
    }
  },
    "aliases": {}
  },
  "version": 2,
    "_meta": {
      "managed": true,
      "description": "default mappings for the .lists index template installed by Kibana/Security"
    }
}