Correct indentation in filebeat.yaml

2025-12-06 17:22:49 +01:00 · 2020-07-01 15:39:23 -04:00
parent 549fd93cba
commit d6feafb12a
2 changed files with 5 additions and 5 deletions
--- a/salt/common/tools/sbin/so-import-pcap
+++ b/salt/common/tools/sbin/so-import-pcap
--- a/salt/filebeat/etc/filebeat.yml
+++ b/salt/filebeat/etc/filebeat.yml
@@ -127,11 +127,11 @@ filebeat.inputs:
        category: network
        imported: true
    processors:
-      - dissect:
-          tokenizer: "/nsm/import/%{import_id}/zeek/logs/%{import_source}"
-          field: "source"
-          target_prefix: ""
-      - drop_fields:
+    - dissect:
+        tokenizer: "/nsm/import/%{import_id}/zeek/logs/%{import_source}"
+        field: "source"
+        target_prefix: ""
+    - drop_fields:
        fields: ["source", "prospector", "input", "offset", "beat"]
 
    fields_under_root: true