schema: mark dns.version and dns.grouped as having no keywords

9 months ago · 771d9d9d8b
parent 00a571a25c
commit 771d9d9d8b
1 changed files with 8 additions and 1 deletions
--- a/etc/schema.json
+++ b/etc/schema.json
@ -1058,7 +1058,10 @@
                },
                "version": {
                    "description": "The version of this EVE DNS event",
-                    "type": "integer"
+                    "type": "integer",
+                    "suricata": {
+                        "keywords": false
+                    }
                },
                "opcode": {
                    "description": "DNS opcode as an integer",
@ -1280,7 +1283,11 @@
                    "additionalProperties": false
                },
                "grouped": {
+                    "desription": "DNS fields grouped by type: alternative format, no direct keywords",
                    "type": "object",
+                    "suricata": {
+                        "keywords": false
+                    },
                    "properties": {
                        "A": {
                            "type": "array",