add zeek.quic mappings

Signed-off-by: reyesj2 <[email protected]>
Security-Onion-Solutions · Jan 8, 2025 · 0e87351 · 0e87351
1 parent 5969e9a
commit 0e87351
Showing 1 changed file with 26 additions and 0 deletions.
diff --git a/salt/elasticsearch/templates/component/ecs/zeek.json b/salt/elasticsearch/templates/component/ecs/zeek.json
@@ -1172,6 +1172,32 @@
                 }
               }
             },
+            "quic": {
+              "type": "object",
+              "properties": {
+                "server_name": {
+                  "type": "keyword"
+                },
+                "version": {
+                  "type": "short"
+                },
+                "client_initial_dcid": {
+                  "type": "keyword"
+                },
+                "client_scid": {
+                  "type": "keyword"
+                },
+                "server_scid": {
+                  "type": "keyword"
+                },
+                "client_protocol": {
+                  "type": "keyword"
+                },
+                "history": {
+                  "type": "keyword"
+                }
+              }
+            },
             "radius": {
               "properties": {
                 "connect_info": {