fix qualys logstash conditionals

This commit is contained in:
pemontto
2019-04-22 13:48:25 +10:00
parent 50f4d76fec
commit 7999810d28

View File

@ -26,7 +26,7 @@ input {
} }
filter { filter {
if "qualys" in [tags] { if "qualys_vuln" in [tags] or "qualys_web" in [tags] {
date { date {
match => [ "scan_time", "UNIX" ] match => [ "scan_time", "UNIX" ]
target => "@timestamp" target => "@timestamp"
@ -82,7 +82,7 @@ filter {
} }
} }
output { output {
if "qualys" in [tags] { if "qualys_vuln" in [tags] or "qualys_web" in [tags] {
stdout { stdout {
codec => dots codec => dots
} }