diff --git a/resources/elk6/logstash-vulnwhisperer-template.json b/resources/elk6/logstash-vulnwhisperer-template.json new file mode 100755 index 0000000..45cc8ae --- /dev/null +++ b/resources/elk6/logstash-vulnwhisperer-template.json @@ -0,0 +1,73 @@ +{ + "order": 0, + "index_patterns": "logstash-vulnwhisperer-*", + "mappings": { + "doc": { + "properties": { + "plugin_id": { + "type": "integer" + }, + "last_updated": { + "type": "date" + }, + "geoip": { + "dynamic": true, + "type": "object", + "properties": { + "ip": { + "type": "ip" + }, + "latitude": { + "type": "float" + }, + "location": { + "type": "geo_point" + }, + "longitude": { + "type": "float" + } + } + }, + "risk_score": { + "type": "float" + }, + "source": { + "type": "keyword" + }, + "synopsis": { + "type": "keyword" + }, + "see_also": { + "type": "keyword" + }, + "@timestamp": { + "type": "date" + }, + "cve": { + "type": "keyword" + }, + "solution": { + "type": "keyword" + }, + "port": { + "type": "integer" + }, + "host": { + "type": "text" + }, + "@version": { + "type": "keyword" + }, + "risk": { + "type": "keyword" + }, + "assign_ip": { + "type": "ip" + }, + "cvss": { + "type": "float" + } + } + } + } +} \ No newline at end of file