CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2026-06-22 18:28:11 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #140 from defensivedepth/logstash-fix

Browse Source 
Fix dup events
This commit is contained in:
Mike Reeves
2019-11-19 15:25:46 -05:00
committed by GitHub
parent 0151955bdd 7373473b3f
commit 5140a17fe3
1 changed files with 0 additions and 17 deletions
Download Patch File Download Diff File Expand all files Collapse all files
salt/logstash/files/dynamic/0006_input_beats.conf
-17
View File
@@ -9,23 +9,6 @@ input {
} }
} }
filter { filter {
if [type] == "ids" or [type] =~ "bro" {
mutate {
rename => { "host" => "beat_host" }
remove_tag => ["beat"]
add_field => { "sensor_name" => "%{[beat][name]}" }
add_field => { "syslog-host_from" => "%{[beat][name]}" }
remove_field => [ "beat", "prospector", "input", "offset" ]
}
}
if [type] =~ "ossec" {
mutate {
rename => { "host" => "beat_host" }
remove_tag => ["beat"]
add_field => { "syslog-host_from" => "%{[beat][name]}" }
remove_field => [ "beat", "prospector", "input", "offset" ]
}
}
if [type] == "osquery" { if [type] == "osquery" {
mutate { mutate {
rename => { "host" => "beat_host" } rename => { "host" => "beat_host" }