Elasticsearch Security Alert - Outgoing Mapper

Maps XSOAR incident fields to outgoing Elasticsearch Security Alert fields.

Elasticsearch Mapper (Out)

Details

IDElasticsearch Security Alert - Outgoing Mapper
Typemapping-outgoing
Version-1
From Version6.2.0
Default Incident Type—
FeedNo

Source

classifier-Elasticsearch_Security_Alert_Outgoing_Mapper.json
Download History Raw 
{
    "description": "Maps XSOAR incident fields to outgoing Elasticsearch Security Alert fields.",
    "feed": false,
    "id": "Elasticsearch Security Alert - Outgoing Mapper",
    "mapping": {
        "Elasticsearch Security Alert": {
            "dontMapEventToLabels": true,
            "internalMapping": {
                "status": {
                    "simple": "elasticsearchworkflowalertstatus"
                },
                "reason": {
                    "simple": "elasticsearchworkflowalertstatusreason"
                },
                "tags": {
                    "simple": "tags"
                }
            }
        }
    },
    "name": "Elasticsearch Security Alert - Outgoing Mapper",
    "type": "mapping-outgoing",
    "version": -1,
    "fromVersion": "6.2.0",
    "supportedModules": [
        "agentix",
        "xsiam"
    ]
}