# Updated by: Doug Burks # Last Update: 5/16/2017 # filter { if "syslog" in [tags] { mutate { #convert => [ "status_code", "integer" ] #add_tag => [ "conf_file_6002"] } } }