From def0c8534924ec2b1d95e48bdd7aa602b5a36406 Mon Sep 17 00:00:00 2001
From: weslambert <wlambertts@gmail.com>
Date: Wed, 7 Dec 2022 08:00:21 -0500
Subject: [PATCH] Disable Filebeat input for 'ecat_arp_info' Zeek logs

---
 salt/filebeat/defaults.yaml | 1 -
 1 file changed, 1 deletion(-)

diff --git a/salt/filebeat/defaults.yaml b/salt/filebeat/defaults.yaml
index 2bd96ca13..ab8a608f5 100644
--- a/salt/filebeat/defaults.yaml
+++ b/salt/filebeat/defaults.yaml
@@ -47,7 +47,6 @@ filebeat:
     - ecat_coe_info
     - ecat_foe_info
     - ecat_soe_info
-    - ecat_arp_info
     - enip
     - modbus_detailed
     - modbus_mask_write_single_register