diff --git a/x-pack/filebeat/module/suricata/eve/ingest/pipeline.json b/x-pack/filebeat/module/suricata/eve/ingest/pipeline.json index 702061c9203..ed700bc0689 100644 --- a/x-pack/filebeat/module/suricata/eve/ingest/pipeline.json +++ b/x-pack/filebeat/module/suricata/eve/ingest/pipeline.json @@ -181,11 +181,9 @@ ,"ignore_failure": true } } - , {"date": - {"field": "suricata.eve.timestamp" - ,"target_field": "event.end" - , "formats": ["ISO8601"] - ,"ignore_failure": true + , {"set": + {"field": "event.end" + ,"value": "{{@timestamp}}" } } , { "script":