# Updated by: Doug Burks
# Last Update: 2/10/2018
#
filter {
  if "import" in [tags] and "bro" in [tags] {

	# we're setting timestamp in 6000 now
	#date {
        #	match => [ "timestamp", "UNIX" ]
	#}

	mutate {
	  #add_tag => [ "conf_file_6001"]
	}
  }
}
