From cdfc3a15ad71f001f7f5eedb74fb582df7090d33 Mon Sep 17 00:00:00 2001
From: Wes Lambert <wlambertts@gmail.com>
Date: Wed, 16 Jan 2019 19:25:06 +0000
Subject: [PATCH] osquery: fix host field conflict

---
 salt/logstash/files/dynamic/0006_input_beats.conf | 1 +
 1 file changed, 1 insertion(+)

diff --git a/salt/logstash/files/dynamic/0006_input_beats.conf b/salt/logstash/files/dynamic/0006_input_beats.conf
index b9f03c979..df590b6a1 100644
--- a/salt/logstash/files/dynamic/0006_input_beats.conf
+++ b/salt/logstash/files/dynamic/0006_input_beats.conf
@@ -28,6 +28,7 @@ filter {
    }
     if [type] == "osquery" {
     mutate {
+      rename => { "host" => "beat_host" }
       remove_tag => ["beat"]
       add_tag => ["osquery"]
         	}