Set event.dataset for all Kratos logs to 'access' for now

2025-12-06 17:22:49 +01:00 · 2023-01-25 08:19:50 -05:00
parent 7bf9d77962
commit c9f458e1e2
1 changed files with 1 additions and 0 deletions
--- a/salt/elasticsearch/files/ingest/kratos
+++ b/salt/elasticsearch/files/ingest/kratos
@@ -1,6 +1,7 @@
 {
  "description" : "kratos",
  "processors" : [
+    { "set": { "field": "event.dataset", "value": "access" } },
    { "pipeline":    { "name": "common" } }
  ]
 }