From 6b8e699eb65756481190d935a67e73c5bb2297df Mon Sep 17 00:00:00 2001 From: pemontto Date: Wed, 8 May 2019 17:52:12 +0100 Subject: [PATCH] make scan_name easily searchable --- resources/elk6/logstash-vulnwhisperer-template.json | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/resources/elk6/logstash-vulnwhisperer-template.json b/resources/elk6/logstash-vulnwhisperer-template.json index bfb95e3..4ee600a 100755 --- a/resources/elk6/logstash-vulnwhisperer-template.json +++ b/resources/elk6/logstash-vulnwhisperer-template.json @@ -171,7 +171,14 @@ "type": "keyword" }, "scan_name": { - "type": "keyword" + "fields": { + "keyword": { + "ignore_above": 256, + "type": "keyword" + } + }, + "norms": false, + "type": "text" }, "scan_source": { "type": "keyword"