mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-06 01:02:46 +01:00
Filter out uneeded Logstash metadata
This commit is contained in:
@@ -10,4 +10,12 @@ input {
|
||||
ssl_verify_mode => "peer"
|
||||
ecs_compatibility => v8
|
||||
}
|
||||
}
|
||||
|
||||
filter {
|
||||
if "elastic-agent" in [tags] {
|
||||
mutate {
|
||||
remove_field => ["http","[metadata][input]","url","user_agent"]
|
||||
}
|
||||
}
|
||||
}
|
||||
Reference in New Issue
Block a user