9d2a7b8ece
### Summary This PR is a follow-up to #89066 - which fixed the same issue occurring with indicator match lists UI. The lack of stable ids for exception item entries resulted in some funky business by where invalid values could overwrite other values when deleting entries in the builder.
42 lines
759 B
JSON
42 lines
759 B
JSON
{
|
|
"type": "index",
|
|
"value": {
|
|
"aliases": {
|
|
"exceptions": {
|
|
"is_write_index": false
|
|
}
|
|
},
|
|
"settings": {
|
|
"index": {
|
|
"refresh_interval": "5s"
|
|
}
|
|
},
|
|
"index": "exceptions-0001",
|
|
"mappings": {
|
|
"properties": {
|
|
"@timestamp": {
|
|
"type": "date"
|
|
},
|
|
"agent": {
|
|
"properties": {
|
|
"name": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"user": {
|
|
"type": "nested",
|
|
"properties": {
|
|
"first": {
|
|
"type": "keyword"
|
|
},
|
|
"last": {
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|