Fix module eval

This commit is contained in:
Wes Lambert
2020-07-16 13:30:38 +00:00
parent 5190e5d434
commit 8275f458a1

View File

@@ -4,7 +4,7 @@
{%- set ES = salt['pillar.get']('elasticsearch:mainip', '') -%}
{%- endif %}
output {
if [event_type] =~ "strelka" {
if [module] =~ "strelka" {
elasticsearch {
pipeline => "%{module}.%{dataset}"
hosts => "{{ ES }}"