fixed mapping of tshark boolean fields to elasticsearch short field

H21lab · Apr 15, 2021 · 47eb6c0 · 47eb6c0
1 parent 60502cb
commit 47eb6c0
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/Public/process_tshark_mapping_json.rb b/Public/process_tshark_mapping_json.rb
@@ -42,7 +42,9 @@
 #parsed['mappings']['doc']['properties']['layers']['properties']['frame']['properties']['frame_frame_time'] = {"type"=>"text"}
 
 output = File.open("#{Dir.pwd}/Kibana/template_tshark_mapping_deduplicated.json","w")
-output.write(JSON.pretty_generate(parsed))
+json_string = JSON.pretty_generate(parsed)
+json_string = json_string.gsub("\"type\": \"boolean\"", "\"type\": \"short\"")
+output.write(json_string)
 
 
 ############## Methods #############