Change signal.rule.risk score mapping from keyword to float (#71126)
* Change risk_score mapping from keyword to float * Change default alert histogram option * Add version to signals template * Fix test * Undo histogram order change Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
This commit is contained in:
parent
2009447ab8
commit
c86ad7bbec
|
@ -25,6 +25,7 @@ export const getSignalsTemplate = (index: string) => {
|
|||
},
|
||||
index_patterns: [`${index}-*`],
|
||||
mappings: ecsMapping.mappings,
|
||||
version: 1,
|
||||
};
|
||||
return template;
|
||||
};
|
||||
|
|
|
@ -68,7 +68,7 @@
|
|||
"type": "keyword"
|
||||
},
|
||||
"risk_score": {
|
||||
"type": "keyword"
|
||||
"type": "float"
|
||||
},
|
||||
"risk_score_mapping": {
|
||||
"properties": {
|
||||
|
|
Loading…
Reference in a new issue