Merge pull request #11708 from Security-Onion-Solutions/2.4/metadatafix2

Dont overwrite metadata
2025-12-06 01:02:46 +01:00 · 2023-11-03 08:47:48 -04:00
parent 96582add5e 8c7767b381
commit 9d639df882
2 changed files with 5 additions and 1 deletions
--- a/salt/logstash/pipelines/config/so/0012_input_elastic_agent.conf.jinja
+++ b/salt/logstash/pipelines/config/so/0012_input_elastic_agent.conf.jinja
@@ -11,7 +11,10 @@ input {
  }
 }
 filter {
+if ![metadata] {
  mutate {
    rename => {"@metadata" => "metadata"}
  }
 }
+}
+
--- a/salt/logstash/pipelines/config/so/0013_input_lumberjack_fleet.conf
+++ b/salt/logstash/pipelines/config/so/0013_input_lumberjack_fleet.conf
@@ -13,10 +13,11 @@ input {


 filter {
-  if "fleet-lumberjack-input" in [tags] {
+if ![metadata] {
  mutate {
    rename => {"@metadata" => "metadata"}
  }
 }
 }

+