mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-07 17:52:46 +01:00
Merge pull request #1014 from Security-Onion-Solutions/fix/strelka_standalone
Fix module eval
This commit is contained in:
@@ -4,7 +4,7 @@
|
||||
{%- set ES = salt['pillar.get']('elasticsearch:mainip', '') -%}
|
||||
{%- endif %}
|
||||
output {
|
||||
if [event_type] =~ "strelka" {
|
||||
if [module] =~ "strelka" {
|
||||
elasticsearch {
|
||||
pipeline => "%{module}.%{dataset}"
|
||||
hosts => "{{ ES }}"
|
||||
|
||||
Reference in New Issue
Block a user