Merge pull request elastic#199 from Ryan-Kophs/eventsESConfig

added code for Steve's networkrules index

resources/elasticsearch_events_template_header.json

@@ -1,5 +1,5 @@
 {
-    "network" : {
+    "events" : {
     "template" : "events*",
     "settings" : {
     "index.refresh_interval" : "10s",

resources/elasticsearch_network_template_header.json

@@ -1,6 +1,6 @@
 {
     "network" : {
-    "template" : "network*",
+    "template" : "network_*",
     "settings" : {
     "index.refresh_interval" : "10s",
      "index.cache.filter.expire" : "2m",

resources/networkrules.json

@@ -0,0 +1,33 @@
+{
+    "networkrules" : {
+    	"template" : "networkrules",
+    	"settings" : {
+    		"index.refresh_interval" : "10s",
+     		"index.cache.filter.expire" : "2m",
+     		"index.cache.field.expire" : "2m"
+    	},
+    	"mappings" : {
+       		"rule" : {
+       			"properties" : {
+       				"enabled" : {
+       					"type" : "boolean"
+       				},
+       				"severity" : {
+       					"type" : "string"
+       				},
+       				"query" : {
+       					"type" : "object"
+       				},
+       				"createdDate" : {
+       					"format" : "yyyy/MM/dd HH:mm:ss||yyyy/MM/dd||yyyy-MM-dd'T'HH:mm:ss.SSSZZ",
+       					"type" : "date"
+       				},
+       				"lastModifiedDate" : {
+       					"format" : "yyyy/MM/dd HH:mm:ss||yyyy/MM/dd||yyyy-MM-dd'T'HH:mm:ss.SSSZZ",
+       					"type" : "date"
+       				}
+       			}
+       		}
+   		}
+	}
+}

scripts/buildESTemplate.sh

@@ -10,4 +10,3 @@ cat resources/elasticsearch_network_template_footer.json >> $ES_TEMPLATE
 cat resources/elasticsearch_events_template_header.json > $EVENTS_TEMPLATE
 perl scripts/buildESTemplate.pl protofiles/DpiMsgLRproto.proto resources/remapping >> $EVENTS_TEMPLATE
 cat resources/elasticsearch_events_template_footer.json >> $EVENTS_TEMPLATE
-