Add default query fields

wazuh · Oct 17, 2023 · ae9d106 · ae9d106
1 parent 190c6f9
commit ae9d106
Show file tree

Hide file tree

Showing 2 changed files with 34 additions and 2 deletions.
diff --git a/ecs/vulnerability-detector/fields/template-settings-legacy.json b/ecs/vulnerability-detector/fields/template-settings-legacy.json
@@ -13,7 +13,23 @@
       },
       "number_of_shards": "1",
       "number_of_replicas": "0",
-      "refresh_interval": "2s"
+      "refresh_interval": "2s",
+      "query.default_field": [
+        "base.tags",
+        "agent.id",
+        "ecs.version",
+        "event.id",
+        "event.module",
+        "event.severity",
+        "host.os.family",
+        "host.os.full.text",
+        "host.os.version",
+        "package.name",
+        "package.version",
+        "vulnerability.id",
+        "vulnerability.description.text",
+        "vulnerability.severity"
+      ]
     }
   }
 }
diff --git a/ecs/vulnerability-detector/fields/template-settings.json b/ecs/vulnerability-detector/fields/template-settings.json
@@ -14,7 +14,23 @@
         },
         "number_of_shards": "1",
         "number_of_replicas": "0",
-        "refresh_interval": "2s"
+        "refresh_interval": "2s",
+        "query.default_field": [
+          "base.tags",
+          "agent.id",
+          "ecs.version",
+          "event.id",
+          "event.module",
+          "event.severity",
+          "host.os.family",
+          "host.os.full.text",
+          "host.os.version",
+          "package.name",
+          "package.version",
+          "vulnerability.id",
+          "vulnerability.description.text",
+          "vulnerability.severity"
+        ]
       }
     }
   }