make trans_id a keyword again

mmguero-dev · Nov 22, 2024 · 6a6cc49 · 6a6cc49
1 parent 71f38df
commit 6a6cc49
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/arkime/etc/config.ini b/arkime/etc/config.ini
@@ -399,7 +399,7 @@ zeek.dnp3_objects.range_high=db:zeek.dnp3_objects.range_high;group:zeek_dnp3;kin
 
 # dns.log
 # https://docs.zeek.org/en/stable/scripts/base/protocols/dns/main.zeek.html#type-DNS::Info
-zeek.dns.trans_id=db:zeek.dns.trans_id;group:zeek_dns;kind:integer;viewerOnly:true;friendly:Transaction ID;help:Transaction ID
+zeek.dns.trans_id=db:zeek.dns.trans_id;group:zeek_dns;kind:termfield;viewerOnly:true;friendly:Transaction ID;help:Transaction ID
 zeek.dns.rtt=db:zeek.dns.rtt;group:zeek_dns;kind:termfield;viewerOnly:true;friendly:Round Trip Time;help:Round Trip Time
 zeek.dns.query=db:zeek.dns.query;group:zeek_dns;kind:termfield;viewerOnly:true;friendly:Query;help:Query
 zeek.dns.qclass=db:zeek.dns.qclass;group:zeek_dns;kind:termfield;viewerOnly:true;friendly:Query Class Code;help:Query Class Code

diff --git a/dashboards/templates/composable/component/zeek.json b/dashboards/templates/composable/component/zeek.json
@@ -66,7 +66,7 @@
         "zeek.dns.rejected": { "type": "keyword" },
         "zeek.dns.rtt": { "type": "float" },
         "zeek.dns.TC": { "type": "keyword" },
-        "zeek.dns.trans_id": { "type": "integer" },
+        "zeek.dns.trans_id": { "type": "keyword" },
         "zeek.dns.TTLs": { "type": "float" },
         "zeek.dns.Z": { "type": "keyword" },
         "zeek.dpd.failure_reason": { "type": "keyword", "ignore_above": 1024, "fields": { "text": { "type": "text" } } },