SOCtopus - Edit osquery playbook template

Fixes bug for when there is no [osquery][columns][address] field
This commit is contained in:
Josh Brower
2019-10-01 17:59:35 -04:00
committed by GitHub
parent 176677add4
commit 308041fad6

View File

@@ -45,4 +45,3 @@ hive_observable_data_mapping:
- ip: '{match[osquery][EndpointIP2]}'
- other: '{match[osquery][hostIdentifier]}'
- other: '{match[osquery][hostname]}'
- ip: '{match[osquery][columns][address]}'