Merge pull request #31 from jonathan-buttner/disable-mapping

Disable dynamic mapping for all datasets

package/endpoint/dataset/alerts/manifest.yml

@@ -1,3 +1,7 @@
 title: Endpoint Alerts
 
 type: logs
+
+elasticsearch:
+  index_template.mappings:
+    dynamic: false

package/endpoint/dataset/file/manifest.yml

@@ -3,3 +3,7 @@ title: Endpoint File Events
 type: logs
 
 name: endpoint.events.file
+
+elasticsearch:
+  index_template.mappings:
+    dynamic: false

package/endpoint/dataset/library/manifest.yml

@@ -3,3 +3,7 @@ title: Endpoint Library and Driver Events
 type: logs
 
 name: endpoint.events.library
+
+elasticsearch:
+  index_template.mappings:
+    dynamic: false

package/endpoint/dataset/metadata/manifest.yml

@@ -1,3 +1,7 @@
 title: Endpoint Metadata
 
 type: metrics
+
+elasticsearch:
+  index_template.mappings:
+    dynamic: false

package/endpoint/dataset/metadata_mirror/manifest.yml

@@ -1,3 +1,7 @@
 title: Endpoint Metadata Mirror
 
 type: metrics
+
+elasticsearch:
+  index_template.mappings:
+    dynamic: false

package/endpoint/dataset/network/manifest.yml

@@ -3,3 +3,7 @@ title: Endpoint Network Events
 type: logs
 
 name: endpoint.events.network
+
+elasticsearch:
+  index_template.mappings:
+    dynamic: false

package/endpoint/dataset/policy/manifest.yml

@@ -1,3 +1,7 @@
 title: Endpoint Policy Response
 
 type: metrics
+
+elasticsearch:
+  index_template.mappings:
+    dynamic: false

package/endpoint/dataset/process/manifest.yml

@@ -3,3 +3,7 @@ title: Endpoint Process Events
 type: logs
 
 name: endpoint.events.process
+
+elasticsearch:
+  index_template.mappings:
+    dynamic: false

package/endpoint/dataset/registry/manifest.yml

@@ -3,3 +3,7 @@ title: Endpoint Registry Events
 type: logs
 
 name: endpoint.events.registry
+
+elasticsearch:
+  index_template.mappings:
+    dynamic: false

package/endpoint/dataset/security/manifest.yml

@@ -3,3 +3,7 @@ title: Endpoint Security Events
 type: logs
 
 name: endpoint.events.security
+
+elasticsearch:
+  index_template.mappings:
+    dynamic: false

package/endpoint/dataset/telemetry/manifest.yml

@@ -1,3 +1,7 @@
 title: Endpoint Telemetry
 
 type: metrics
+
+elasticsearch:
+  index_template.mappings:
+    dynamic: false