Change wildcard type to keyword

wazuh · Dec 11, 2024 · 08a2150 · 08a2150
1 parent 03c15c6
commit 08a2150
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/ecs/generate.sh b/ecs/generate.sh
@@ -50,6 +50,10 @@ generate_mappings() {
   # Replace "constant_keyword" type (not supported by OpenSearch) with "keyword"
   echo "Replacing \"constant_keyword\" type with \"keyword\""
   find "$OUT_DIR" -type f -exec sed -i 's/constant_keyword/keyword/g' {} \;
+
+  # Replace "wildcard" type (showing as "unknown" on dashboard) with "keyword"
+  echo "Replacing \"wildcard\" type with \"keyword\""
+  find "$OUT_DIR" -type f -exec sed -i 's/wildcard/keyword/g' {} \;
 
   # Replace "flattened" type (not supported by OpenSearch) with "flat_object"
   echo "Replacing \"flattened\" type with \"flat_object\""