mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-06 17:22:49 +01:00
9 lines
415 B
Plaintext
9 lines
415 B
Plaintext
{
|
|
"description" : "kratos",
|
|
"processors" : [
|
|
{"set":{"field":"audience","value":"access","override":false,"ignore_failure":true}},
|
|
{"set":{"field":"event.dataset","ignore_empty_value":true,"ignore_failure":true,"value":"kratos.{{{audience}}}","media_type":"text/plain"}},
|
|
{"set":{"field":"event.action","ignore_failure":true,"copy_from":"msg" }},
|
|
{ "pipeline": { "name": "common" } }
|
|
]
|
|
} |