# Author: Justin Henderson
#         SANS Instructor and author of SANS SEC555: SIEM and Tactical Analytics
# Email: justin@hasecuritysolution.com
# Last Update: 12/9/2016

filter {
  ruby {
    code => "event.set('task_start', Time.now.to_f)"
  }
  mutate {
    #add_tag => [ "conf_file_1000"]
  }
}