Merge pull request #407 from Security-Onion-Solutions/fix/bro_template

Fix/bro template

pillar/logstash/eval.sls

@@ -25,3 +25,4 @@ logstash:
     - so/logstash-ossec-template.json
     - so/logstash-strelka-template.json
     - so/logstash-template.json
+    - so/logstash-bro-template.json

salt/logstash/pipelines/config/so/9000_output_bro.conf.jinja

@@ -23,8 +23,8 @@ output {
       pipeline => "%{event_type}"
       hosts => "{{ ES }}"
       index => "logstash-bro-%{+YYYY.MM.dd}"
-      template_name => "logstash"
-      template => "/logstash-template.json"
+      template_name => "logstash-bro"
+      template => "/logstash-bro-template.json"
       template_overwrite => true
     }
   }