mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2026-04-27 06:57:50 +02:00
osquery: fix host field conflict
This commit is contained in:
@@ -28,6 +28,7 @@ filter {
|
|||||||
}
|
}
|
||||||
if [type] == "osquery" {
|
if [type] == "osquery" {
|
||||||
mutate {
|
mutate {
|
||||||
|
rename => { "host" => "beat_host" }
|
||||||
remove_tag => ["beat"]
|
remove_tag => ["beat"]
|
||||||
add_tag => ["osquery"]
|
add_tag => ["osquery"]
|
||||||
}
|
}
|
||||||
|
|||||||
Reference in New Issue
Block a user