CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 09:12:45 +01:00
Code Issues Packages Projects Releases Wiki Activity

Filter out uneeded Logstash metadata

Browse Source
This commit is contained in:
Josh Brower
2023-05-17 11:06:16 -04:00
parent 5536f5a8c2
commit 7d0251952c
1 changed files with 8 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
salt/logstash/pipelines/config/so/0013_input_http_fleet.conf
View File

@@ -11,3 +11,11 @@ input {
ecs_compatibility => v8 ecs_compatibility => v8
} }
} }
filter {
if "elastic-agent" in [tags] {
mutate {
remove_field => ["http","[metadata][input]","url","user_agent"]
}
}
}