Update IDH Mappings

Security-Onion-Solutions · Aug 3, 2023 · f4c71c8 · f4c71c8
1 parent 3b3f6a1
commit f4c71c8
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/so-soctopus/so-soctopus/playbook/securityonion-baseline.yml b/so-soctopus/so-soctopus/playbook/securityonion-baseline.yml
@@ -216,7 +216,7 @@ logsources:
 defaultindex: "*:so-*"
 fieldmappings:
     #START: SO Specific Mappings
-    DestinationIsIpv6: 
+    logtype: event.code
     EventID: event.code
     Channel: winlog.channel
     Protocol: network.transport
@@ -687,4 +687,4 @@ fieldmappings:
     ApplicationPath: winlog.event_data.ApplicationPath
     ModifyingApplication: winlog.event_data.ModifyingApplication
     Action: winlog.event_data.Action
-    #END: Default WLB/ECS Mappings
+    #END: Default WLB/ECS Mappings