Files
securityonion/salt/elasticsearch/files/ingest/hydra
Jason Ertel 523ff66389 connect work
2024-10-16 13:44:01 -04:00

9 lines
413 B
Plaintext

{
"description" : "hydra",
"processors" : [
{"set":{"field":"audience","value":"access","override":false,"ignore_failure":true}},
{"set":{"field":"event.dataset","ignore_empty_value":true,"ignore_failure":true,"value":"hydra.{{{audience}}}","media_type":"text/plain"}},
{"set":{"field":"event.action","ignore_failure":true,"copy_from":"msg" }},
{ "pipeline": { "name": "common" } }
]
}