Change signal.rule.risk score mapping from keyword to float (#71126)

* Change risk_score mapping from keyword to float

* Change default alert histogram option

* Add version to signals template

* Fix test

* Undo histogram order change

Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
This commit is contained in:
Marshall Main 2020-07-13 23:06:48 -04:00 committed by GitHub
parent 2009447ab8
commit c86ad7bbec
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 2 additions and 1 deletions

View file

@ -25,6 +25,7 @@ export const getSignalsTemplate = (index: string) => {
},
index_patterns: [`${index}-*`],
mappings: ecsMapping.mappings,
version: 1,
};
return template;
};

View file

@ -68,7 +68,7 @@
"type": "keyword"
},
"risk_score": {
"type": "keyword"
"type": "float"
},
"risk_score_mapping": {
"properties": {