diff --git a/salt/logstash/files/dynamic/0006_input_beats.conf b/salt/logstash/files/dynamic/0006_input_beats.conf index d3615b126..b263e611b 100644 --- a/salt/logstash/files/dynamic/0006_input_beats.conf +++ b/salt/logstash/files/dynamic/0006_input_beats.conf @@ -9,7 +9,7 @@ input { } } filter { - if "ids" in [tags] { + if [type] == "ids" { mutate { rename => { "host" => "beat_host" } remove_tag => ["beat"]