DNS Suricata parser

2026-10-08 15:25:26 +02:00 · 2020-06-03 20:40:10 -04:00
1 parent 3211a8a5e0
commit 702a14e90c
@@ -2,7 +2,7 @@
  "description" : "suricata.dns",
  "processors" : [
    { "rename": 	{ "field": "message2.proto", 		"target_field": "network.transport",		"ignore_missing": true 	} },
-    { "rename": 	{ "field": "message2.app_proto", 		"target_field": "network.protocol",		"ignore_missing": true 	} },
+    { "rename": 	{ "field": "message2.dns.rrname", 		"target_field": "dns.query.name",		"ignore_missing": true 	} },
    { "pipeline": { "name": "common" } }
  ]
 }