mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-06 17:22:49 +01:00
Fix indentation
This commit is contained in:
@@ -146,7 +146,7 @@ filebeat.inputs:
|
|||||||
processors:
|
processors:
|
||||||
{%- if LOGNAME is match('^bacnet*|^cip*|^cotp*|^dnp3*|^ecat*|^enip*|^modbus*|^opcua*'|^profinet*'|^s7comm*') %}
|
{%- if LOGNAME is match('^bacnet*|^cip*|^cotp*|^dnp3*|^ecat*|^enip*|^modbus*|^opcua*'|^profinet*'|^s7comm*') %}
|
||||||
- add_tags:
|
- add_tags:
|
||||||
tags: ["ics"]
|
tags: ["ics"]
|
||||||
{%- endif %}
|
{%- endif %}
|
||||||
- drop_fields:
|
- drop_fields:
|
||||||
fields: ["source", "prospector", "input", "offset", "beat"]
|
fields: ["source", "prospector", "input", "offset", "beat"]
|
||||||
@@ -167,7 +167,7 @@ filebeat.inputs:
|
|||||||
processors:
|
processors:
|
||||||
{%- if LOGNAME is match('^bacnet*|^cip*|^cotp*|^dnp3*|^ecat*|^enip*|^modbus*|^opcua*'|^profinet*'|^s7comm*') %}
|
{%- if LOGNAME is match('^bacnet*|^cip*|^cotp*|^dnp3*|^ecat*|^enip*|^modbus*|^opcua*'|^profinet*'|^s7comm*') %}
|
||||||
- add_tags:
|
- add_tags:
|
||||||
tags: ["ics"]
|
tags: ["ics"]
|
||||||
{%- endif %}
|
{%- endif %}
|
||||||
- add_tags:
|
- add_tags:
|
||||||
tags: ["import"]
|
tags: ["import"]
|
||||||
|
|||||||
Reference in New Issue
Block a user