From b20d0a32c467e9980ad3d5e2917bf731931b2a83 Mon Sep 17 00:00:00 2001 From: Seth Grover Date: Mon, 21 Nov 2022 08:30:34 -0700 Subject: [PATCH] fix idaholab/Malcolm#129, filtering by rootId in Arkime returns no results --- dashboards/templates/composable/component/arkime.json | 1 + 1 file changed, 1 insertion(+) diff --git a/dashboards/templates/composable/component/arkime.json b/dashboards/templates/composable/component/arkime.json index 9dd04874b..b1b975fd5 100644 --- a/dashboards/templates/composable/component/arkime.json +++ b/dashboards/templates/composable/component/arkime.json @@ -16,6 +16,7 @@ "protocol": { "type": "keyword" }, "quic.host": { "type": "keyword" }, "quic.version": { "type": "keyword" }, + "rootId": { "type": "keyword" }, "source.geo.country_code2": { "type": "keyword" }, "source.geo.country_code3": { "type": "keyword" }, "source.geo.dma_code": { "type": "short" },