Alex-Devera/tpotce
1
0
Fork 0
mirror of https://github.com/telekom-security/tpotce.git synced 2025-04-20 06:02:24 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

fix template

Browse source
This commit is contained in:
t3chn0m4g3 2022-02-20 16:38:15 +00:00
parent a73c4b67d9
commit 656c99446e
1 changed files with 45 additions and 42 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

87
docker/elk/logstash/dist/tpot-template.json vendored
View file

@ -19,7 +19,17 @@
}
},
"mappings": {
"dynamic": "true",
"_source": {
"excludes": [],
"includes": [],
"enabled": true
},
"_routing": {
"required": false
},
"dynamic": true,
"numeric_detection": false,
"date_detection": true,
"dynamic_date_formats": [
"strict_date_optional_time",
"yyyy/MM/dd HH:mm:ss Z||yyyy/MM/dd Z"
@ -28,67 +38,60 @@
{
"message_field": {
"path_match": "message",
"match_mapping_type": "string",
"mapping": {
"norms": false,
"type": "text"
}
},
"match_mapping_type": "string"
}
},
{
"string_fields": {
"match": "*",
"match_mapping_type": "string",
"mapping": {
"norms": false,
"fields": {
"keyword": {
"ignore_above": 256,
"type": "keyword"
}
},
"norms": false,
"type": "text"
}
},
"match_mapping_type": "string",
"match": "*"
}
}
],
"date_detection": true,
"numeric_detection": false,
"properties": {
"geoip": {
"properties": {
"ip": {
"type": "ip"
},
"latitude": {
"type": "half_float"
},
"location": {
"type": "geo_point"
},
"longitude": {
"type": "half_float"
}
}
"geoip.ip": {
"type": "ip"
},
"geoip_ext": {
"properties": {
"ip": {
"type": "ip"
},
"latitude": {
"type": "half_float"
},
"location": {
"type": "geo_point"
},
"longitude": {
"type": "half_float"
}
}
"geoip.latitude": {
"type": "half_float"
},
"geoip.location": {
"type": "geo_point"
},
"geoip.longitude": {
"type": "half_float"
},
"geoip_ext.ip": {
"type": "ip"
},
"geoip_ext.latitude": {
"type": "half_float"
},
"geoip_ext.location": {
"type": "geo_point"
},
"geoip_ext.longitude": {
"type": "half_float"
}
}
},
"aliases": {}
}
}
},
"index_patterns": [
"logstash-*"
],
"composed_of": []
}