mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-26 10:53:07 +01:00
87 lines
2.3 KiB
JSON
87 lines
2.3 KiB
JSON
{
|
|
"_meta": {
|
|
"documentation": "https://www.elastic.co/guide/en/ecs/current/ecs-http.html",
|
|
"ecs_version": "1.12.2"
|
|
},
|
|
"template": {
|
|
"mappings": {
|
|
"properties": {
|
|
"http": {
|
|
"properties": {
|
|
"request": {
|
|
"properties": {
|
|
"body": {
|
|
"properties": {
|
|
"bytes": {
|
|
"type": "long"
|
|
},
|
|
"content": {
|
|
"fields": {
|
|
"text": {
|
|
"type": "match_only_text"
|
|
}
|
|
},
|
|
"type": "wildcard"
|
|
}
|
|
}
|
|
},
|
|
"bytes": {
|
|
"type": "long"
|
|
},
|
|
"id": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"method": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"mime_type": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"referrer": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"response": {
|
|
"properties": {
|
|
"body": {
|
|
"properties": {
|
|
"bytes": {
|
|
"type": "long"
|
|
},
|
|
"content": {
|
|
"fields": {
|
|
"text": {
|
|
"type": "match_only_text"
|
|
}
|
|
},
|
|
"type": "wildcard"
|
|
}
|
|
}
|
|
},
|
|
"bytes": {
|
|
"type": "long"
|
|
},
|
|
"mime_type": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"status_code": {
|
|
"type": "long"
|
|
}
|
|
}
|
|
},
|
|
"version": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
} |