Merge pull request #13414 from Security-Onion-Solutions/fix/system_ma…

…pping Fix system mapping
Security-Onion-Solutions · Jul 31, 2024 · 9a2252e · 9a2252e
2 parents 63531cd + 9264a03
commit 9a2252e
Show file tree

Hide file tree

Showing 2 changed files with 31 additions and 0 deletions.
diff --git a/salt/elasticsearch/defaults.yaml b/salt/elasticsearch/defaults.yaml
@@ -9101,6 +9101,7 @@ elasticsearch:
         - logs-system.auth@custom
         - so-fleet_globals-1
         - so-fleet_agent_id_verification-1
+        - so-system
         data_stream:
           allow_custom_routing: false
           hidden: false
@@ -9195,6 +9196,7 @@ elasticsearch:
         - logs-system.syslog@custom
         - so-fleet_globals-1
         - so-fleet_agent_id_verification-1
+        - so-system
         data_stream:
           allow_custom_routing: false
           hidden: false

diff --git a/salt/elasticsearch/templates/component/so/so-system-mappings.json b/salt/elasticsearch/templates/component/so/so-system-mappings.json
@@ -0,0 +1,29 @@
+{
+  "template": {
+    "mappings": {
+      "properties": {
+        "host": {
+	  "properties":{
+            "ip": {
+              "type": "ip"
+            }
+	  }
+	},
+	"related": {
+          "properties":{
+            "ip": {
+              "type": "ip"
+            }
+          }
+        },
+	"source": {
+          "properties":{
+            "ip": {
+              "type": "ip"
+            }
+          }
+        }
+      }
+    }
+  }
+}