From 3be0d05eeab7b6cf714fbabf58c34f2ab1a6c00e Mon Sep 17 00:00:00 2001 From: weslambert Date: Mon, 25 Oct 2021 13:16:30 -0400 Subject: [PATCH] Update field removal based on HTTP input changes --- .../logstash/pipelines/config/so/9900_output_endgame.conf.jinja | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/salt/logstash/pipelines/config/so/9900_output_endgame.conf.jinja b/salt/logstash/pipelines/config/so/9900_output_endgame.conf.jinja index f23913637..b5920fe40 100644 --- a/salt/logstash/pipelines/config/so/9900_output_endgame.conf.jinja +++ b/salt/logstash/pipelines/config/so/9900_output_endgame.conf.jinja @@ -8,7 +8,7 @@ filter { if [event][module] =~ "endgame" { mutate { - remove_field => ["headers", "host"] + remove_field => ["client_headers", "client_host"] } } }