Remove dataset name since pipeline no longer in use

This commit is contained in:
weslambert
2020-10-07 11:48:56 -04:00
committed by GitHub
parent 8015676e01
commit 8e829b47ae

View File

@@ -7,7 +7,7 @@
output {
if [module] =~ "ossec" {
elasticsearch {
pipeline => "%{module}.%{dataset}"
pipeline => "%{module}"
hosts => "{{ ES }}"
index => "so-ossec-%{+YYYY.MM.dd}"
template_name => "so-ossec"