infosecn1nja
/
HELK
mirror of https://github.com/infosecn1nja/HELK.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

not ip index management for pipeline we had, but hand't set elasticsearch template - now we do

keyword-vs-text-changes
neu5ron 2019-02-22 03:01:30 -05:00
parent 1939fa58c4
commit ad7817f3ea
1 changed files with 26 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

26
docker/helk-logstash/output_templates/90-logs-not-ip.json Normal file
View File

@ -0,0 +1,26 @@
{
"order": 90,
"index_patterns": [ "logs-*" ],
"version": 2018080101,
"mappings": {
"doc": {
"properties": {
"not_ip_dst": {
"type": "keyword"
},
"not_ip_dst_nat": {
"type": "keyword"
},
"not_ip_log": {
"type": "keyword"
},
"not_ip_src": {
"type": "keyword"
},
"not_ip_src_nat": {
"type": "keyword"
}
}
}
}
}