mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2026-04-27 15:07:51 +02:00
incoming bro_tunnel logs should go to bro_tunnels
This commit is contained in:
@@ -0,0 +1,7 @@
|
|||||||
|
{
|
||||||
|
"description" : "bro_tunnel",
|
||||||
|
"processors" : [
|
||||||
|
{ "set": { "field": "event_type", "value": "bro_tunnels" } },
|
||||||
|
{ "pipeline": { "name": "bro_tunnels" } }
|
||||||
|
]
|
||||||
|
}
|
||||||
Reference in New Issue
Block a user