Merge pull request elastic#170 from Logrhythm/exclude

Exclude capturekey
harper-carroll · May 5, 2014 · 74a1a09 · 74a1a09
2 parents b67233a + 990987a
commit 74a1a09
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 0 deletions.
diff --git a/resources/NetMonFieldNames.csv b/resources/NetMonFieldNames.csv
@@ -10,6 +10,7 @@ _n/a,
 _n/a,�� optional uint64 BytesDest = 16;,,DestBytes,Destination Bytes,csv,<bytesin>,Impacted Host KB Received,,Complete,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
 _n/a,�� optional uint64 BytesDestDelta = 21;,,DestBytesDelta,Destination Bytes Delta,n/a,,,,Complete,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
 _n/a,�� optional uint32 IPDest = 5;,,DestIP,Destination IP,csv,<dip>,Impacted IP,,Complete,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
+_n/a,�� optional string IPDest6 = 43;,,DestIP6,Destination IP6,csv,<dip>,Impacted IP,,Complete,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
 _n/a,�� optional uint64 MACDest = 3;,,DestMAC,Destination MAC,csv,<dmac>,Impacted MAC Address,,Complete,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
 _n/a,�� optional uint32 PortDest = 9;,,DestPort,Destination Port,csv,<dport>,Impacted Port,,Complete,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
 _n/a,�� optional uint64 Duration = 31;,,Duration,Duration,n/a,,,,Complete,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
@@ -27,6 +28,7 @@ _n/a,   optional string SessionID = 1;,,Session,Session,csv,<session>,Session,,C
 _n/a,�� optional uint64 BytesSource = 17;,,SrcBytes,Source Bytes,csv,<bytesout>,Impacted Host KB Sent,,Complete,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
 _n/a,�� optional uint64 BytesSourceDelta = 22;,,SrcBytesDelta,Source Bytes Delta,n/a,,,,Complete,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
 _n/a,�� optional uint32 IPSource = 4;,,SrcIP,Source IP,csv,<sip>,Origin IP,,Complete,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
+_n/a,�� optional string IPSource6 = 42;,,SrcIP6,Source IP6,csv,<sip>,Origin IP,,Complete,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
 _n/a,�� optional uint64 MACSource = 2;,,SrcMAC,Source MAC,csv,<smac>,Origin MAC Address,,Complete,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
 _n/a,�� optional uint32 PortSource = 8;,,SrcPort,Source Port,csv,<sport>,Origin Port,,Complete,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
 _n/a,�� optional uint32 ThreadID = 33;,,ThreadID,Thread ID,n/a,,,,Complete,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,

diff --git a/scripts/buildESTemplate.pl b/scripts/buildESTemplate.pl
@@ -53,6 +53,7 @@ sub ReadProtoFile {
 print "\"Captured\" : { \"type\": \"string\", \"null_value\": \"false\"},\n";
 print "\"Session\" : {\"type\": \"string\", \"index\" : \"not_analyzed\"},\n";
 print "\"SrcMAC\" : {\"type\" : \"string\", \"index\" : \"not_analyzed\", \"ignore_malformed\" : true},\n";
+print "\"CaptureKey\" : {\"type\" : \"string\", \"index\" : \"no\", \"store\" : false, \"ignore_malformed\" : true},\n";
 
 
 for $app ( keys %typeHash ) {