diff --git a/salt/logstash/files/dynamic/0006_input_beats.conf b/salt/logstash/files/dynamic/0006_input_beats.conf
index a2ac0cb97..c78d90e11 100644
--- a/salt/logstash/files/dynamic/0006_input_beats.conf
+++ b/salt/logstash/files/dynamic/0006_input_beats.conf
@@ -11,18 +11,18 @@ input {
 filter {
   if "ids" in [tags] {
     mutate {
-      rename => { "[beat][name]", "sensor_name" }
-      rename => { "[beat][hostname]", "syslog-host_from" }
-      remove_tag => ["beat"]
       rename => { "host" => "beat_host" }
+      remove_tag => ["beat"]
+      copy => {"%{beat[name]}" => "sensor_name"}
+      copy => {"%{beat[name]}" => "syslog-host_from"}
     }
   }
   if "bro" in [tags] {
     mutate {
-      rename => { "[beat][name]", "sensor_name" }
-      rename => { "[beat][hostname]", "syslog-host_from" }
-      remove_tag => ["beat"]
-      rename => { "host" => "beat_host" }
+    rename => { "host" => "beat_host" }
+    remove_tag => ["beat"]
+    copy => {"%{beat[name]}" => "sensor_name"}
+    copy => {"%{beat[name]}" => "syslog-host_from"}
     }
   }
 }