Set RITA event.dataset value explicitly

This commit is contained in:
Wes
2023-01-24 18:00:34 +00:00
parent 38ead7cb82
commit 4b9c92c53d
3 changed files with 6 additions and 6 deletions

View File

@@ -3,8 +3,8 @@
"processors": [
{
"set": {
"field": "_index",
"value": "so-rita",
"field": "event.dataset",
"value": "beacon",
"override": true
}
},

View File

@@ -3,8 +3,8 @@
"processors": [
{
"set": {
"field": "_index",
"value": "so-rita",
"field": "event.dataset",
"value": "connection",
"override": true
}
},

View File

@@ -3,8 +3,8 @@
"processors": [
{
"set": {
"field": "_index",
"value": "so-rita",
"field": "event.dataset",
"value": "dns",
"override": true
}
},