From 356904f751c4f9dc2762e1e78f1856ff9ebd0eb3 Mon Sep 17 00:00:00 2001 From: weslambert Date: Tue, 22 Nov 2022 13:03:04 -0500 Subject: [PATCH] Fix spelling of 'wireguard.responses' field name --- salt/elasticsearch/files/ingest/zeek.wireguard | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/salt/elasticsearch/files/ingest/zeek.wireguard b/salt/elasticsearch/files/ingest/zeek.wireguard index ac8e56964..e8a56bfe0 100644 --- a/salt/elasticsearch/files/ingest/zeek.wireguard +++ b/salt/elasticsearch/files/ingest/zeek.wireguard @@ -5,7 +5,7 @@ { "json": { "field": "message", "target_field": "message2", "ignore_failure": true} }, { "rename": { "field": "message2.established", "target_field": "wireguard.established", "ignore_missing": true } }, { "rename": { "field": "message2.initiations", "target_field": "wireguard.initiations", "ignore_missing": true } }, - { "rename": { "field": "message2.responses", "target_field": "wireguard.respsonses", "ignore_missing": true } }, + { "rename": { "field": "message2.responses", "target_field": "wireguard.responses", "ignore_missing": true } }, { "pipeline": { "name": "zeek.common" } } ] }