From 7fc1f576d99c17e08f228093ce51eacf636248dc Mon Sep 17 00:00:00 2001
From: dlee35 <dlee35@gmail.com>
Date: Wed, 5 Dec 2018 15:05:11 -0500
Subject: [PATCH] changed tag eval to type

---
 salt/logstash/files/dynamic/0006_input_beats.conf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/salt/logstash/files/dynamic/0006_input_beats.conf b/salt/logstash/files/dynamic/0006_input_beats.conf
index d3615b126..b263e611b 100644
--- a/salt/logstash/files/dynamic/0006_input_beats.conf
+++ b/salt/logstash/files/dynamic/0006_input_beats.conf
@@ -9,7 +9,7 @@ input {
   }
 }
 filter {
-  if "ids" in [tags] {
+  if [type] == "ids" {
     mutate {
       rename => { "host" => "beat_host" }
       remove_tag => ["beat"]