diff --git a/arkime/etc/config.ini b/arkime/etc/config.ini index ba2e8e74f..4aabd2f3a 100644 --- a/arkime/etc/config.ini +++ b/arkime/etc/config.ini @@ -399,7 +399,7 @@ zeek.dnp3_objects.range_high=db:zeek.dnp3_objects.range_high;group:zeek_dnp3;kin # dns.log # https://docs.zeek.org/en/stable/scripts/base/protocols/dns/main.zeek.html#type-DNS::Info -zeek.dns.trans_id=db:zeek.dns.trans_id;group:zeek_dns;kind:integer;viewerOnly:true;friendly:Transaction ID;help:Transaction ID +zeek.dns.trans_id=db:zeek.dns.trans_id;group:zeek_dns;kind:termfield;viewerOnly:true;friendly:Transaction ID;help:Transaction ID zeek.dns.rtt=db:zeek.dns.rtt;group:zeek_dns;kind:termfield;viewerOnly:true;friendly:Round Trip Time;help:Round Trip Time zeek.dns.query=db:zeek.dns.query;group:zeek_dns;kind:termfield;viewerOnly:true;friendly:Query;help:Query zeek.dns.qclass=db:zeek.dns.qclass;group:zeek_dns;kind:termfield;viewerOnly:true;friendly:Query Class Code;help:Query Class Code diff --git a/dashboards/templates/composable/component/zeek.json b/dashboards/templates/composable/component/zeek.json index 7212bf292..d4fae78d4 100644 --- a/dashboards/templates/composable/component/zeek.json +++ b/dashboards/templates/composable/component/zeek.json @@ -66,7 +66,7 @@ "zeek.dns.rejected": { "type": "keyword" }, "zeek.dns.rtt": { "type": "float" }, "zeek.dns.TC": { "type": "keyword" }, - "zeek.dns.trans_id": { "type": "integer" }, + "zeek.dns.trans_id": { "type": "keyword" }, "zeek.dns.TTLs": { "type": "float" }, "zeek.dns.Z": { "type": "keyword" }, "zeek.dpd.failure_reason": { "type": "keyword", "ignore_above": 1024, "fields": { "text": { "type": "text" } } },