custom-nodes-security-scan/dast/.cuckoo/elasticsearch/template.json

{
    "template": "cuckoo-*",
    "settings": {
        "index": {
            "mapping.coerce": true,
            "number_of_shards": "1",
            "codec": "best_compression",
            "number_of_replicas": "0"
        }
    },
    "mappings": {
        "cuckoo": {
            "date_detection": false,
            "dynamic_templates": [
                {
                    "not_analyzed": {
                        "mapping": {
                            "index": "not_analyzed",
                            "type": "string",
                            "ignore_above": 32766
                        },
                        "match_mapping_type": "string",
                        "match": "*"
                    }
                },
                {
                    "signatures": {
                        "mapping": {
                            "index": "not_analyzed",
                            "type": "string",
                            "ignore_above": 32766
                        },
                        "path_match": "signatures.marks.call.arguments.*",
                        "path_unmatch": "signatures.marks.call.arguments.registers.*",
                        "match": "*",
                        "match_mapping_type": "long"
                    }
                }
            ],
            "properties": {
                "report_time": {
                    "format": "epoch_second",
                    "type": "date"
                },
                "procmemory": {
                    "type": "nested",
                    "include_in_root": "True",
                    "properties": {
                        "regions": {
                           "include_in_root": "True",
                           "type": "nested"
                        }
                    }
                }
            }
        },
        "call": {
            "date_detection": false,
            "dynamic_templates": [
                {
                    "not_analyzed": {
                        "mapping": {
                            "index": "not_analyzed",
                            "type": "string",
                            "ignore_above": 32766
                        },
                        "match_mapping_type": "string",
                        "match": "*"
                    }
                },
                {
                    "call_arguments": {
                        "mapping": {
                            "index": "not_analyzed",
                            "type": "string",
                            "ignore_above": 32766
                        },
                        "path_match": "arguments.*",
                        "match": "*",
                        "match_mapping_type": "long"
                    }
                }
            ],
            "properties": {
                "report_time": {
                    "format": "epoch_second",
                    "type": "date"
                }
            }
        },
        "irma": {
            "dynamic_templates": [
                {
                    "notanalyzed": {
                        "mapping": {
                            "index": "not_analyzed",
                            "type": "string",
                            "doc_values": "True"
                        },
                        "match_mapping_type": "string",
                        "match": "*"
                    }
                }
            ],
            "properties": {
                "timestamp_first_scan": {
                    "format": "epoch_millis",
                    "type": "date"
                },
                "timestamp_last_scan": {
                    "format": "epoch_millis",
                    "type": "date"
                }
            }
        }
    }
}