From a5979fcb883452f7e58121ee519b4f2279068ae7 Mon Sep 17 00:00:00 2001
From: Mike Reeves <luke@geekempire.com>
Date: Tue, 16 Oct 2018 17:47:10 -0400
Subject: [PATCH] Logstash Module - Change it to arrays

---
 salt/logstash/files/dynamic/0006_input_beats.conf | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/salt/logstash/files/dynamic/0006_input_beats.conf b/salt/logstash/files/dynamic/0006_input_beats.conf
index c78d90e11..dd4f20ba7 100644
--- a/salt/logstash/files/dynamic/0006_input_beats.conf
+++ b/salt/logstash/files/dynamic/0006_input_beats.conf
@@ -19,10 +19,10 @@ filter {
   }
   if "bro" in [tags] {
     mutate {
-    rename => { "host" => "beat_host" }
-    remove_tag => ["beat"]
-    copy => {"%{beat[name]}" => "sensor_name"}
-    copy => {"%{beat[name]}" => "syslog-host_from"}
+      rename => { "host" => "beat_host" }
+      remove_tag => ["beat"]
+      copy => {"%{beat[name]}" => "sensor_name"}
+      copy => {"%{beat[name]}" => "syslog-host_from"}
     }
   }
 }