From 4cf31e1ee7c1c3de2a191cd6790745dd1497fb44 Mon Sep 17 00:00:00 2001 From: weslambert Date: Wed, 8 Jul 2020 10:55:40 -0400 Subject: [PATCH] Drop message field and original exiftool keys --- salt/elasticsearch/files/ingest/strelka.file | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/salt/elasticsearch/files/ingest/strelka.file b/salt/elasticsearch/files/ingest/strelka.file index cf9cb48f7..17c1dca62 100644 --- a/salt/elasticsearch/files/ingest/strelka.file +++ b/salt/elasticsearch/files/ingest/strelka.file @@ -19,7 +19,7 @@ } } }, - { "remove": { "field": ["host", "path"], "ignore_missing": true } }, + { "remove": { "field": ["host", "path", "message", "scan.exiftool.keys"], "ignore_missing": true } }, { "pipeline": { "name": "common" } } ] }