OpenSearch Framework

HyperSec XDR OpenSeach Framework

v3.2.6 External source support merge

REST Installation

    curl -X PUT _plugins/_ism/policies/hypersec-ism-hot-warm-delete -H 'Content-Type: application/json' -d @os_hypersec-ism-hot-warm-delete.json
    curl -X PUT _component_template/hypersec-log-component-template -H 'Content-Type: application/json' -d @os_hypersec-log-component-template
    curl -X PUT _component_template/hypersec-log-component-template-medium -H 'Content-Type: application/json' -d @os_hypersec-log-component-template-medium.json  
    curl -X PUT _component_template/hypersec-log-component-template-large -H 'Content-Type: application/json' -d @os_hypersec-log-component-template-large.json  

For Development and Test Environments

Replace the following with the dev-test variants:

_component_template/hypersec-log-component-template _plugins/_ism/policies/hypersec-ism-hot-warm-delete

    curl -X PUT _component_template/hypersec-log-component-template -H 'Content-Type: application/json' -d @os_hypersec-log-component-template-dev-test.json
    curl -X PUT _plugins/_ism/policies/hypersec-ism-hot-warm-delete -H 'Content-Type: application/json' -d @os_hypersec-ism-hot-warm-delete-dev-test.json