Cyberdefense/VulnWhisperer
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update template to version 5.x (#73)

Browse Source 
* Update template to Elasticsearch 5.x

* Update template to Elasticsearch 5.x

I think _all field is no longer needed from ES 5.x because of the search all field execution if _all is disabled
This commit is contained in:
Anh Le
2018-06-30 13:25:29 -07:00
committed by Austin Taylor
parent 9a08acb2d6
commit 3ac9a8156a
1 changed files with 16 additions and 32 deletions
Download Patch File Download Diff File Expand all files Collapse all files

48
elasticsearch/logstash-vulnwhisperer-template.json
View File

@ -21,8 +21,7 @@
"mappings": { "mappings": {
"_default_": { "_default_": {
"_all": { "_all": {
"enabled": true, "enabled": false
"norms": false
}, },
"dynamic_templates": [ "dynamic_templates": [
{ {
@ -57,73 +56,58 @@
"type": "integer" "type": "integer"
}, },
"last_updated": { "last_updated": {
"type": "date", "type": "date"
"doc_values": true
}, },
"geoip": { "geoip": {
"dynamic": true, "dynamic": true,
"type": "object", "type": "object",
"properties": { "properties": {
"ip": { "ip": {
"type": "ip", "type": "ip"
"doc_values": true
}, },
"latitude": { "latitude": {
"type": "float", "type": "float"
"doc_values": true
}, },
"location": { "location": {
"type": "geo_point", "type": "geo_point"
"doc_values": true
}, },
"longitude": { "longitude": {
"type": "float", "type": "float"
"doc_values": true
} }
} }
}, },
"risk_score": { "risk_score": {
"type": "float" "type": "float"
}, },
"source": { "source": {
"index": "not_analyzed", "type": "keyword"
"type": "string"
}, },
"synopsis": { "synopsis": {
"index": "not_analyzed", "type": "keyword"
"type": "string"
}, },
"see_also": { "see_also": {
"index": "not_analyzed", "type": "keyword"
"type": "string"
}, },
"@timestamp": { "@timestamp": {
"type": "date", "type": "date"
"doc_values": true
}, },
"cve": { "cve": {
"index": "not_analyzed", "type": "keyword"
"type": "string"
}, },
"solution": { "solution": {
"index": "not_analyzed", "type": "keyword"
"type": "string"
}, },
"port": { "port": {
"index": "not_analyzed",
"type": "integer" "type": "integer"
}, },
"host": { "host": {
"type": "string" "type": "text"
}, },
"@version": { "@version": {
"index": "not_analyzed", "type": "keyword"
"type": "string",
"doc_values": true
}, },
"risk": { "risk": {
"index": "not_analyzed", "type": "keyword"
"type": "string"
}, },
"assign_ip": { "assign_ip": {
"type": "ip" "type": "ip"