Add missing * to vulnerabilities index pattern (#115)

* Add missing * to vulnerabilities index pattern * Use latest version of the states-vulnerabilities index template * Remove tailing hyphen from the states-vulnerabilities index pattern * Use latest version of the states-vulnerabilities index template For real this time --------- Co-authored-by: Álex Ruiz <[email protected]>
wazuh · Oct 22, 2024 · da5505d · da5505d
1 parent c38c054
commit da5505d
Showing 1 changed file with 5 additions and 12 deletions.
diff --git a/plugins/setup/src/main/resources/index-template-vulnerabilities.json b/plugins/setup/src/main/resources/index-template-vulnerabilities.json
@@ -1,6 +1,6 @@
 {
   "index_patterns": [
-    "wazuh-states-vulnerabilities"
+    "wazuh-states-vulnerabilities*"
   ],
   "mappings": {
     "date_detection": false,
@@ -227,28 +227,21 @@
   "order": 1,
   "settings": {
     "index": {
-      "codec": "best_compression",
-      "mapping": {
-        "total_fields": {
-          "limit": 1000
-        }
-      },
       "number_of_replicas": "0",
       "number_of_shards": "1",
       "query.default_field": [
-        "base.tags",
         "agent.id",
-        "host.os.family",
-        "host.os.full.text",
+        "agent.group",
+        "host.os.full",
         "host.os.version",
         "package.name",
         "package.version",
         "vulnerability.id",
-        "vulnerability.description.text",
+        "vulnerability.description",
         "vulnerability.severity",
         "wazuh.cluster.name"
       ],
-      "refresh_interval": "2s"
+      "refresh_interval": "5s"
     }
   }
 }