mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-06 17:22:49 +01:00
22 lines
402 B
Plaintext
22 lines
402 B
Plaintext
{
|
|
"processors": [
|
|
{
|
|
"convert": {
|
|
"field": "_ingest._value",
|
|
"type": "ip",
|
|
"target_field": "_ingest._temp_ip",
|
|
"ignore_failure": true
|
|
}
|
|
},
|
|
{
|
|
"append": {
|
|
"field": "temp._valid_ips",
|
|
"allow_duplicates": false,
|
|
"value": [
|
|
"{{{_ingest._temp_ip}}}"
|
|
],
|
|
"ignore_failure": true
|
|
}
|
|
}
|
|
]
|
|
} |