From 7ec21736e6410955e4db83e8a1ea5affdab9bf9b Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=C3=81lex=20Ruiz?= Date: Thu, 12 Sep 2024 18:01:15 +0200 Subject: [PATCH] Implement the creation of the states-inventory-packages index template and index Signed-off-by: Fede Tux --- .../resources/index-template-packages.json | 91 ++++++++++++++----- 1 file changed, 67 insertions(+), 24 deletions(-) diff --git a/plugins/wazuh-indexer-setup/src/main/resources/index-template-packages.json b/plugins/wazuh-indexer-setup/src/main/resources/index-template-packages.json index 4872fa4..d534b11 100644 --- a/plugins/wazuh-indexer-setup/src/main/resources/index-template-packages.json +++ b/plugins/wazuh-indexer-setup/src/main/resources/index-template-packages.json @@ -2,32 +2,75 @@ "index_patterns": [ "wazuh-states-inventory-packages*" ], - "priority": 1, - "template": { - "settings": { - "index": { - "hidden": true, - "number_of_replicas": "0", - "number_of_shards": "1", - "query.default_field": [ - "agent.id", - "agent.groups", - "package.architecture", - "package.name", - "package.version", - "package.type" - ], - "refresh_interval": "5s" - } - }, - "mappings": { - "date_detection": false, - "dynamic": "strict", - "properties": { - "@timestamp": { - "type": "date" + "mappings": { + "date_detection": false, + "dynamic": "strict", + "properties": { + "@timestamp": { + "type": "date" + }, + "agent": { + "properties": { + "groups": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "package": { + "properties": { + "architecture": { + "ignore_above": 1024, + "type": "keyword" + }, + "description": { + "ignore_above": 1024, + "type": "keyword" + }, + "installed": { + "type": "date" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "path": { + "ignore_above": 1024, + "type": "keyword" + }, + "size": { + "type": "long" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } } } } + }, + "order": 1, + "settings": { + "index": { + "number_of_replicas": "0", + "number_of_shards": "1", + "query.default_field": [ + "agent.id", + "agent.groups", + "package.architecture", + "package.name", + "package.version", + "package.type" + ], + "refresh_interval": "5s" + } } }