Alex-Devera/tpotce
1
0
Fork 0
mirror of https://github.com/telekom-security/tpotce.git synced 2025-05-03 13:48:54 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

fix template

Browse source
This commit is contained in:
t3chn0m4g3 2022-02-20 16:38:15 +00:00
parent a73c4b67d9
commit 656c99446e
1 changed files with 45 additions and 42 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

55
docker/elk/logstash/dist/tpot-template.json vendored
View file

@ -19,7 +19,17 @@
} }
}, },
"mappings": { "mappings": {
"dynamic": "true", "_source": {
"excludes": [],
"includes": [],
"enabled": true
},
"_routing": {
"required": false
},
"dynamic": true,
"numeric_detection": false,
"date_detection": true,
"dynamic_date_formats": [ "dynamic_date_formats": [
"strict_date_optional_time", "strict_date_optional_time",
"yyyy/MM/dd HH:mm:ss Z||yyyy/MM/dd Z" "yyyy/MM/dd HH:mm:ss Z||yyyy/MM/dd Z"
@ -28,67 +38,60 @@
{ {
"message_field": { "message_field": {
"path_match": "message", "path_match": "message",
"match_mapping_type": "string",
"mapping": { "mapping": {
"norms": false, "norms": false,
"type": "text" "type": "text"
} },
"match_mapping_type": "string"
} }
}, },
{ {
"string_fields": { "string_fields": {
"match": "*",
"match_mapping_type": "string",
"mapping": { "mapping": {
"norms": false,
"fields": { "fields": {
"keyword": { "keyword": {
"ignore_above": 256, "ignore_above": 256,
"type": "keyword" "type": "keyword"
} }
}, },
"norms": false,
"type": "text" "type": "text"
} },
"match_mapping_type": "string",
"match": "*"
} }
} }
], ],
"date_detection": true,
"numeric_detection": false,
"properties": { "properties": {
"geoip": { "geoip.ip": {
"properties": {
"ip": {
"type": "ip" "type": "ip"
}, },
"latitude": { "geoip.latitude": {
"type": "half_float" "type": "half_float"
}, },
"location": { "geoip.location": {
"type": "geo_point" "type": "geo_point"
}, },
"longitude": { "geoip.longitude": {
"type": "half_float" "type": "half_float"
}
}
}, },
"geoip_ext": { "geoip_ext.ip": {
"properties": {
"ip": {
"type": "ip" "type": "ip"
}, },
"latitude": { "geoip_ext.latitude": {
"type": "half_float" "type": "half_float"
}, },
"location": { "geoip_ext.location": {
"type": "geo_point" "type": "geo_point"
}, },
"longitude": { "geoip_ext.longitude": {
"type": "half_float" "type": "half_float"
} }
} }
} }
}
}, },
"aliases": {} "index_patterns": [
} "logstash-*"
],
"composed_of": []
} }