CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2026-04-29 16:07:53 +02:00
Code Issues Packages Projects Releases Wiki Activity

Fix typo in ingest pipeline

Browse Source 
Test to fix duplicate events in SOC, by removing conflicting field event.created

Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
This commit is contained in:
reyesj2
2024-04-11 11:18:04 -04:00
parent 7124f04138
commit fd689a4607
2 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
salt/elasticsearch/files/ingest/kismet.ap
+1 -1
View File
@@ -24,7 +24,7 @@
{ {
"rename": { "rename": {
"field": "message2.dot11_device.dot11_device_last_beaconed_ssid_record.dot11_advertisedssid_dot11e_channel_utilization_perc", "field": "message2.dot11_device.dot11_device_last_beaconed_ssid_record.dot11_advertisedssid_dot11e_channel_utilization_perc",
"target_field": "network.network.wireless.channel_utilization", "target_field": "network.wireless.channel_utilization",
"if": "ctx?.message2?.dot11_device?.dot11_device_last_beaconed_ssid_record?.dot11_advertisedssid_dot11e_channel_utilization_perc != null" "if": "ctx?.message2?.dot11_device?.dot11_device_last_beaconed_ssid_record?.dot11_advertisedssid_dot11e_channel_utilization_perc != null"
} }
}, },
salt/elasticsearch/files/ingest/kismet.common
+2 -1
View File
@@ -149,7 +149,8 @@
"device_type", "device_type",
"wifi", "wifi",
"agent", "agent",
"host" "host",
"event.created"
], ],
"ignore_failure": true "ignore_failure": true
} }