mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-24 01:43:11 +01:00
Logstash Module - Change it to arrays
This commit is contained in:
@@ -19,10 +19,10 @@ filter {
|
||||
}
|
||||
if "bro" in [tags] {
|
||||
mutate {
|
||||
rename => { "host" => "beat_host" }
|
||||
remove_tag => ["beat"]
|
||||
copy => {"%{beat[name]}" => "sensor_name"}
|
||||
copy => {"%{beat[name]}" => "syslog-host_from"}
|
||||
rename => { "host" => "beat_host" }
|
||||
remove_tag => ["beat"]
|
||||
copy => {"%{beat[name]}" => "sensor_name"}
|
||||
copy => {"%{beat[name]}" => "syslog-host_from"}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user