upstream template style

tomrade · Jul 25, 2020 · 50d547f · 50d547f
1 parent 4871aeb
commit 50d547f
Showing 1 changed file with 9 additions and 7 deletions.
diff --git a/es_stuff/index-template.json b/es_stuff/index-template.json
@@ -2,17 +2,19 @@
     "index_patterns": ["evtx_nom","evtx_nom-*"],
     "mappings": {
       "dynamic_templates" : [
-        {"winlog" : {
-          "path_match" : "winlog.*",
-          "match_mapping_type": "string",
-          "mapping" : {
-            "type" : "keyword"
-           }
+        { "strings_as_keywords" : {
+          "mapping": {
+            "ignore_above": 1024,
+            "type": "keyword"
+          },
+          "match_mapping_type": "string"
         }
         }
       ],
       "properties": {
-        "event.original" : {"enabled" : false}
+        "@timestamp" : {"type" : "date"},
+        "event.original" : {"enabled" : false},
+        "message" : { "norms" : false, "type" : "text"}
       }
     },
     "settings" : {