work in progress for idaholab#395, malcolm reporting capture statisti…

…cs from zeek/suricata
mmguero-dev · Feb 6, 2024 · 1ea5296 · 1ea5296
1 parent 7669c6c
commit 1ea5296
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/logstash/pipelines/beats/11_beats_logs.conf b/logstash/pipelines/beats/11_beats_logs.conf
@@ -784,6 +784,8 @@ filter {
 
     mutate { id => "mutate_add_field_event_module_zeek_diagnostic"
              add_field => { "[event][module]" => "zeek" } }
+    mutate { id => "mutate_remove_field_event_original_zeek_diagnostic"
+             remove_field => [ "[event][original]" ] }
 
   } # event type (filebeat.nginx, miscbeat, etc)