mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-06 09:12:45 +01:00
Rename uids to uid
This commit is contained in:
@@ -10,7 +10,7 @@
|
|||||||
{ "rename": { "field": "message2.tx_hosts.0", "target_field": "source.ip", "ignore_missing": true } },
|
{ "rename": { "field": "message2.tx_hosts.0", "target_field": "source.ip", "ignore_missing": true } },
|
||||||
{ "remove": { "field": "message2.rx_hosts", "ignore_missing": true } },
|
{ "remove": { "field": "message2.rx_hosts", "ignore_missing": true } },
|
||||||
{ "remove": { "field": "message2.tx_hosts", "ignore_missing": true } },
|
{ "remove": { "field": "message2.tx_hosts", "ignore_missing": true } },
|
||||||
{ "rename": { "field": "message2.conn_uids", "target_field": "log.id.uids", "ignore_missing": true } },
|
{ "rename": { "field": "message2.conn_uids", "target_field": "log.id.uid", "ignore_missing": true } },
|
||||||
{ "rename": { "field": "message2.source", "target_field": "file.source", "ignore_missing": true } },
|
{ "rename": { "field": "message2.source", "target_field": "file.source", "ignore_missing": true } },
|
||||||
{ "rename": { "field": "message2.depth", "target_field": "file.depth", "ignore_missing": true } },
|
{ "rename": { "field": "message2.depth", "target_field": "file.depth", "ignore_missing": true } },
|
||||||
{ "rename": { "field": "message2.analyzers", "target_field": "file.analyzer", "ignore_missing": true } },
|
{ "rename": { "field": "message2.analyzers", "target_field": "file.analyzer", "ignore_missing": true } },
|
||||||
|
|||||||
Reference in New Issue
Block a user