use web_application_name as asset

2019-05-01 20:50:41 +01:00
parent e2c2b47d4d
commit 98a84af5d0
2 changed files with 2 additions and 8 deletions
--- a/resources/elk6/pipeline/2000_qualys_web_scans.conf
+++ b/resources/elk6/pipeline/2000_qualys_web_scans.conf
@ -33,12 +33,6 @@ filter {
      remove_field => ["scan_time"]
    }

-    if "qualys_web" in [tags] {
-      mutate {
-        add_field => { "asset" => "%{web_application_name}" }
-      }
-    }
-
    mutate {
      convert => { "cvss" => "float"}
      convert => { "cvss_base" => "float"}