From 818f912a905a8d15cfab13c9dfe22800fe7237cf Mon Sep 17 00:00:00 2001
From: William Wernert <william.wernert@securityonionsolutions.com>
Date: Wed, 14 Jul 2021 10:13:14 -0400
Subject: [PATCH] [fix] Remove indent

---
 salt/filebeat/etc/filebeat.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/salt/filebeat/etc/filebeat.yml b/salt/filebeat/etc/filebeat.yml
index 39257c991..68fc32d7c 100644
--- a/salt/filebeat/etc/filebeat.yml
+++ b/salt/filebeat/etc/filebeat.yml
@@ -119,7 +119,7 @@ filebeat.inputs:
     module: logscan
     dataset: alert
   processors:
-    - drop_fields:
+  - drop_fields:
       fields: ["source", "prospector", "input", "offset", "beat"]
   fields_under_root: true
   clean_removed: true