remove _timestamp correctly

2019-04-15 20:12:28 +10:00
parent 97d2a2606c
commit dd66414fe7
3 changed files with 3 additions and 3 deletions
--- a/resources/elk6/pipeline/3000_openvas.conf
+++ b/resources/elk6/pipeline/3000_openvas.conf
@ -23,7 +23,7 @@ filter {
    date {
      match => [ "_timestamp", "UNIX" ]
      target => "@timestamp"
-      remove_field => ["timestamp"]
+      remove_field => ["_timestamp"]
    }

    grok {