OmerTirosh e2ee0db727 Ignore failure for rename processor ...

Ignore failure for winlog.event_data.SubjectUserName rename processor.
For some event ids (for example 4688), this field already been added in winlogbeat JS processor.
Therefor, elastic throw [user.name] already exists error.

2020-11-24 17:21:47 +02:00

..

files

Ignore failure for rename processor

2020-11-24 17:21:47 +02:00

templates

Format scan.exiftool as text

2020-11-02 19:31:14 +00:00

init.sls

redo how containers get added to so-status https://github.com/Security-Onion-Solutions/securityonion/issues/1681

2020-11-10 15:31:47 -05:00