From 1cc5961c070690c9ba107750361d4cd7bf9a24b2 Mon Sep 17 00:00:00 2001 From: weslambert Date: Tue, 29 Nov 2022 12:54:55 -0500 Subject: [PATCH] Change 'write' to 'read' to correct name and avoid pipeline failure --- .../files/ingest/zeek.modbus_read_write_multiple_registers | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/salt/elasticsearch/files/ingest/zeek.modbus_read_write_multiple_registers b/salt/elasticsearch/files/ingest/zeek.modbus_read_write_multiple_registers index e60c593fe..c0b37fa99 100644 --- a/salt/elasticsearch/files/ingest/zeek.modbus_read_write_multiple_registers +++ b/salt/elasticsearch/files/ingest/zeek.modbus_read_write_multiple_registers @@ -8,7 +8,7 @@ { "rename": { "field": "message2.network_direction", "target_field": "modbus.network.direction", "ignore_missing": true } }, { "rename": { "field": "message2.write_start_address", "target_field": "modbus.write.start.address", "ignore_missing": true } }, { "rename": { "field": "message2.write_registers", "target_field": "modbus.write.registers", "ignore_missing": true } }, - { "rename": { "field": "message2.read_start_address", "target_field": "modbus.write.start.address", "ignore_missing": true } }, + { "rename": { "field": "message2.read_start_address", "target_field": "modbus.read.start.address", "ignore_missing": true } }, { "rename": { "field": "message2.read.quality", "target_field": "modbus.read.quality", "ignore_missing": true } }, { "rename": { "field": "message2.read_registers", "target_field": "modbus.read.registers", "ignore_missing": true } }, { "pipeline": { "name": "zeek.common" } }