mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-06 09:12:45 +01:00
Update field removal based on HTTP input changes
This commit is contained in:
@@ -8,7 +8,7 @@
|
||||
filter {
|
||||
if [event][module] =~ "endgame" {
|
||||
mutate {
|
||||
remove_field => ["headers", "host"]
|
||||
remove_field => ["client_headers", "client_host"]
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user