From 82c649a3ad170c8d1a56e61b06358d242a11d5a5 Mon Sep 17 00:00:00 2001 From: Kevin Ledesma Date: Wed, 11 Dec 2024 06:15:40 -0300 Subject: [PATCH] Update alerts mapping settings to enable dynamic fields (#584) Update alerts ECS template documentation --- ecs/alerts/fields/mapping-settings.json | 4 ++-- ecs/docs/alerts.md | 11 ++++++++++- 2 files changed, 12 insertions(+), 3 deletions(-) diff --git a/ecs/alerts/fields/mapping-settings.json b/ecs/alerts/fields/mapping-settings.json index 0ad2b48fcc1be..f176a1c52e87f 100644 --- a/ecs/alerts/fields/mapping-settings.json +++ b/ecs/alerts/fields/mapping-settings.json @@ -1,4 +1,4 @@ { - "dynamic": "strict", + "dynamic": true, "date_detection": false -} \ No newline at end of file +} diff --git a/ecs/docs/alerts.md b/ecs/docs/alerts.md index 134009eff9435..dfe644ce40dc0 100644 --- a/ecs/docs/alerts.md +++ b/ecs/docs/alerts.md @@ -611,7 +611,7 @@ fields: fields: "*" ``` -### +### Template settings ```json { @@ -633,3 +633,12 @@ fields: } } ``` + +### Mapping settings + +```json +{ + "dynamic": true, + "date_detection": false +} +```