Lowercase network transport

2026-03-25 05:52:41 +01:00 · 2026-03-24 11:24:59 -04:00
parent 271de757e7
commit 1f9bf45b66
1 changed files with 6 additions and 0 deletions
--- a/salt/elasticsearch/files/ingest/suricata.common
+++ b/salt/elasticsearch/files/ingest/suricata.common
@@ -22,6 +22,12 @@
                "ignore_failure": true
            }
        },
+        {
+            "lowercase": {
+                "field": "network.transport",
+                "ignore_failure": true
+            }
+        },
        {
            "rename": {
                "field": "message2.in_iface",