From 8e829b47aec88905c1c9331cfb958ef52c3e9fef Mon Sep 17 00:00:00 2001
From: weslambert <wlambertts@gmail.com>
Date: Wed, 7 Oct 2020 11:48:56 -0400
Subject: [PATCH] Remove dataset name since pipeline no longer in use

---
 salt/logstash/pipelines/config/so/9600_output_ossec.conf.jinja | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/salt/logstash/pipelines/config/so/9600_output_ossec.conf.jinja b/salt/logstash/pipelines/config/so/9600_output_ossec.conf.jinja
index 89d1a9466..7ebe6afbd 100644
--- a/salt/logstash/pipelines/config/so/9600_output_ossec.conf.jinja
+++ b/salt/logstash/pipelines/config/so/9600_output_ossec.conf.jinja
@@ -7,7 +7,7 @@
 output {
   if [module] =~ "ossec" {
     elasticsearch {
-      pipeline => "%{module}.%{dataset}"
+      pipeline => "%{module}"
       hosts => "{{ ES }}"
       index => "so-ossec-%{+YYYY.MM.dd}"
       template_name => "so-ossec"