remove unnecessary groks

This commit is contained in:
pemontto
2019-04-22 11:38:41 +10:00
parent 8d59831855
commit 0c3200567e
3 changed files with 11 additions and 21 deletions

View File

@ -33,13 +33,6 @@ filter {
remove_field => ["scan_time"]
}
#If using filebeats as your source, you will need to replace the "path" field to "source"
# Remove when scan name is included in event (current method is error prone)
grok {
match => { "path" => "([a-zA-Z0-9_.\-]+)_%{INT}_%{INT:history_id}_%{INT}.json$" }
tag_on_failure => []
}
mutate {
convert => { "cvss" => "float"}
convert => { "cvss_base" => "float"}