mirror of
https://github.com/telekom-security/tpotce.git
synced 2025-07-02 01:27:27 -04:00
increase total number of fields for logstash template
The number of 1000 should not exceed, however as a precaution the limit on future versions of T-Pot will be pushed to 2000. Also see #382
This commit is contained in:
@ -60,6 +60,25 @@ curl -s XPUT ''$myES'_template/.*' -H 'Content-Type: application/json' -d'
|
|||||||
}'
|
}'
|
||||||
echo
|
echo
|
||||||
|
|
||||||
|
# Set logstash template
|
||||||
|
echo -n $myCOL1"### Setting up logstash template: "$myCOL0
|
||||||
|
curl -s XPUT ''$myES'_template/logstash' -H 'Content-Type: application/json' -d'
|
||||||
|
{
|
||||||
|
"index_patterns": "logstash-*",
|
||||||
|
"settings" : {
|
||||||
|
"index" : {
|
||||||
|
"number_of_shards": 1,
|
||||||
|
"number_of_replicas": 0,
|
||||||
|
"mapping" : {
|
||||||
|
"total_fields" : {
|
||||||
|
"limit" : "2000"
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}'
|
||||||
|
echo
|
||||||
|
|
||||||
# Restore indices
|
# Restore indices
|
||||||
curl -s -X DELETE ''$myES'.kibana*' > /dev/null
|
curl -s -X DELETE ''$myES'.kibana*' > /dev/null
|
||||||
for i in $myINDICES;
|
for i in $myINDICES;
|
||||||
|
Reference in New Issue
Block a user