Logstash Module - Change it to arrays

This commit is contained in:
Mike Reeves
2018-10-16 17:47:10 -04:00
parent ea7ddfc2da
commit a5979fcb88

View File

@@ -19,10 +19,10 @@ filter {
}
if "bro" in [tags] {
mutate {
rename => { "host" => "beat_host" }
remove_tag => ["beat"]
copy => {"%{beat[name]}" => "sensor_name"}
copy => {"%{beat[name]}" => "syslog-host_from"}
rename => { "host" => "beat_host" }
remove_tag => ["beat"]
copy => {"%{beat[name]}" => "sensor_name"}
copy => {"%{beat[name]}" => "syslog-host_from"}
}
}
}