Skip to content

Commit 6583002

Browse files
Update Non ECS Combined Mappings
1 parent 85fcbc9 commit 6583002

File tree

1 file changed

+3
-0
lines changed

1 file changed

+3
-0
lines changed

detection_rules/index_mappings.py

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -289,8 +289,11 @@ def get_filtered_index_schema(
289289
filtered_index_lookup.update(custom_mapping)
290290

291291
# Reduce the combined mappings to only the matched indices (local schema validation source of truth)
292+
# Custom and non-ecs mappings are filtered before being sent to this function in prepare mappings
292293
combined_mappings: dict[str, Any] = {}
293294
utils.combine_dicts(combined_mappings, deepcopy(ecs_schema))
295+
utils.combine_dicts(combined_mappings, deepcopy(non_ecs_mapping))
296+
utils.combine_dicts(combined_mappings, deepcopy(custom_mapping))
294297
for match in matches:
295298
utils.combine_dicts(combined_mappings, deepcopy(filtered_index_lookup.get(match, {})))
296299

0 commit comments

Comments
 (0)