Add support for dns.resolved_ip

2026-04-25 05:57:49 +02:00 · 2025-06-20 15:02:59 -04:00
parent 92e9bd43ca
commit 31cd5b1365
2 changed files with 12 additions and 2 deletions
@@ -190,6 +190,15 @@ transformations:
      - type: logsource
        category: network
        service: dns
+    # Maps "network + http" to SO HTTP logs
+    - id: network_http_so_add-fields
+      type: add_condition
+      conditions:
+        tags: 'http'
+      rule_conditions:
+      - type: logsource
+        category: network
+        service: http
    # Maps "network + file" to SO file logs
    - id: network_file_so_add-fields
      type: add_condition