schema: mark dns.version and dns.grouped as having no keywords

jasonish · Feb 21, 2025 · 41e2534 · 41e2534
1 parent 298262b
commit 41e2534
Showing 1 changed file with 8 additions and 1 deletion.
diff --git a/etc/schema.json b/etc/schema.json
@@ -1058,7 +1058,10 @@
                 },
                 "version": {
                     "description": "The version of this EVE DNS event",
-                    "type": "integer"
+                    "type": "integer",
+                    "suricata": {
+                        "keywords": false
+                    }
                 },
                 "opcode": {
                     "description": "DNS opcode as an integer",
@@ -1280,7 +1283,11 @@
                     "additionalProperties": false
                 },
                 "grouped": {
+                    "desription": "DNS fields grouped by type: alternative format, no direct keywords",
                     "type": "object",
+                    "suricata": {
+                        "keywords": false
+                    },
                     "properties": {
                         "A": {
                             "type": "array",