Updated Wazuh template

2019-10-25 13:45:03 +02:00 · 2019-10-25 13:45:03 +02:00 · 359f3e3cb4
commit 359f3e3cb4
parent 9647c79e68
1 changed files with 5 additions and 1 deletions
--- a/roles/wazuh/ansible-filebeat/templates/elasticsearch.yml.j2
+++ b/roles/wazuh/ansible-filebeat/templates/elasticsearch.yml.j2
@ -162,6 +162,7 @@
      "data.dstip",
      "data.dstport",
      "data.dstuser",
+      "data.extra_data",
      "data.hardware.serial",
      "data.id",
      "data.integration",
@ -943,6 +944,9 @@
          "data": {
            "type": "keyword"
          },
+          "extra_data": {
+            "type": "keyword"
+          },
          "system_name": {
            "type": "keyword"
          },