Merge pull request #9316 from Security-Onion-Solutions/fix/ics_scada_filebeat_disable_ecat_arp_info

Disable Filebeat input for 'ecat_arp_info' Zeek logs
This commit is contained in:
weslambert
2022-12-07 08:08:42 -05:00
committed by GitHub

View File

@@ -47,7 +47,6 @@ filebeat:
- ecat_coe_info - ecat_coe_info
- ecat_foe_info - ecat_foe_info
- ecat_soe_info - ecat_soe_info
- ecat_arp_info
- enip - enip
- modbus_detailed - modbus_detailed
- modbus_mask_write_single_register - modbus_mask_write_single_register