mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2026-05-05 02:48:21 +02:00
Correct indentation in filebeat.yaml
This commit is contained in:
Regular → Executable
@@ -127,11 +127,11 @@ filebeat.inputs:
|
|||||||
category: network
|
category: network
|
||||||
imported: true
|
imported: true
|
||||||
processors:
|
processors:
|
||||||
- dissect:
|
- dissect:
|
||||||
tokenizer: "/nsm/import/%{import_id}/zeek/logs/%{import_source}"
|
tokenizer: "/nsm/import/%{import_id}/zeek/logs/%{import_source}"
|
||||||
field: "source"
|
field: "source"
|
||||||
target_prefix: ""
|
target_prefix: ""
|
||||||
- drop_fields:
|
- drop_fields:
|
||||||
fields: ["source", "prospector", "input", "offset", "beat"]
|
fields: ["source", "prospector", "input", "offset", "beat"]
|
||||||
|
|
||||||
fields_under_root: true
|
fields_under_root: true
|
||||||
|
|||||||
Reference in New Issue
Block a user