mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-08 10:12:53 +01:00
changed tag eval to type
This commit is contained in:
@@ -9,7 +9,7 @@ input {
|
|||||||
}
|
}
|
||||||
}
|
}
|
||||||
filter {
|
filter {
|
||||||
if "ids" in [tags] {
|
if [type] == "ids" {
|
||||||
mutate {
|
mutate {
|
||||||
rename => { "host" => "beat_host" }
|
rename => { "host" => "beat_host" }
|
||||||
remove_tag => ["beat"]
|
remove_tag => ["beat"]
|
||||||
|
|||||||
Reference in New Issue
Block a user