From 005930f7fd70577ced8bec4f25650ec42fb1eccd Mon Sep 17 00:00:00 2001 From: Wes Date: Thu, 7 Mar 2024 15:41:23 +0000 Subject: [PATCH] Add error.message mapping for system.syslog --- .../logs-system.syslog@custom.json | 22 +++++++++++++++++++ 1 file changed, 22 insertions(+) create mode 100644 salt/elasticsearch/templates/component/elastic-agent/logs-system.syslog@custom.json diff --git a/salt/elasticsearch/templates/component/elastic-agent/logs-system.syslog@custom.json b/salt/elasticsearch/templates/component/elastic-agent/logs-system.syslog@custom.json new file mode 100644 index 0000000000..0123fb9561 --- /dev/null +++ b/salt/elasticsearch/templates/component/elastic-agent/logs-system.syslog@custom.json @@ -0,0 +1,22 @@ +{ + "template": { + "mappings": { + "properties": { + "error": { + "properties": { + "message": { + "type": "match_only_text" + } + } + } + } + } + }, + "_meta": { + "package": { + "name": "system" + }, + "managed_by": "fleet", + "managed": true + } +}