Add mor suricata ingest parser types

This commit is contained in:
Mike Reeves committed 2020-06-02 14:42:15 -04:00
1 parent 3096d8d988
commit fb68506418
1 file changed
+8
@@ -0,0 +1,8 @@
{
"description" : "suricata.smtp",
"processors" : [
{ "rename": { "field": "message2.proto", "target_field": "network.transport", "ignore_missing": true } },
{ "rename": { "field": "message2.app_proto", "target_field": "network.protocol", "ignore_missing": true } },
{ "pipeline": { "name": "common" } }
]
}