Merge pull request #15669 from Security-Onion-Solutions/lowercasefix

Lowercase network transport
2026-03-24 21:42:42 +01:00 · 2026-03-24 11:30:13 -04:00
parent 271de757e7 1f9bf45b66
commit d4f1078f84
1 changed files with 6 additions and 0 deletions
--- a/salt/elasticsearch/files/ingest/suricata.common
+++ b/salt/elasticsearch/files/ingest/suricata.common
@@ -22,6 +22,12 @@
                "ignore_failure": true
            }
        },
+        {
+            "lowercase": {
+                "field": "network.transport",
+                "ignore_failure": true
+            }
+        },
        {
            "rename": {
                "field": "message2.in_iface",