From 4b91ade2e8b2863f7000e39d2d9eb7c7d8249f25 Mon Sep 17 00:00:00 2001 From: Wes Lambert Date: Sat, 16 May 2020 15:03:27 +0000 Subject: [PATCH] fix message_types one more time :) --- salt/elasticsearch/files/ingest/zeek.dhcp | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/salt/elasticsearch/files/ingest/zeek.dhcp b/salt/elasticsearch/files/ingest/zeek.dhcp index aafe4d73f..f3a551edd 100644 --- a/salt/elasticsearch/files/ingest/zeek.dhcp +++ b/salt/elasticsearch/files/ingest/zeek.dhcp @@ -15,7 +15,7 @@ { "rename": { "field": "message2.domain", "target_field": "host.domain", "ignore_missing": true } }, { "rename": { "field": "message2.host_name", "target_field": "host.hostname", "ignore_missing": true } }, { "rename": { "field": "message2.duration", "target_field": "event.duration", "ignore_missing": true } }, - { "rename": { "field": "message2.msg_types", "target_field": "dchp.message_types", "ignore_missing": true } }, + { "rename": { "field": "message2.msg_types", "target_field": "dhcp.message_types", "ignore_missing": true } }, { "pipeline": { "name": "zeek.common" } } ] }