tag container logs

2026-05-02 09:28:31 +02:00 · 2023-05-10 14:19:17 -04:00
parent 24140c4cda
commit 2293574f2e
4 changed files with 4 additions and 4 deletions
@@ -18,7 +18,7 @@
              "/opt/so/log/soc/sync.log"
            ],
            "data_stream.dataset": "soc",
-            "tags": [],
+            "tags": ["so-soc"],
            "processors": "- dissect:\n    tokenizer: \"%{event.action}\"\n    field: \"message\"\n    target_prefix: \"\"\n- add_fields:\n    target: event\n    fields:\n      category: host\n      module: soc\n      dataset_temp: auth_sync",
            "custom": "pipeline: common"
          }