mirror of
https://github.com/telekom-security/tpotce.git
synced 2025-07-02 01:27:27 -04:00
rename conpot fields to match index pattern
This commit is contained in:
6
docker/elk/logstash/dist/logstash.conf
vendored
6
docker/elk/logstash/dist/logstash.conf
vendored
@ -170,6 +170,12 @@ filter {
|
|||||||
date {
|
date {
|
||||||
match => [ "timestamp", "ISO8601" ]
|
match => [ "timestamp", "ISO8601" ]
|
||||||
}
|
}
|
||||||
|
mutate {
|
||||||
|
rename => {
|
||||||
|
"dst_port" => "dest_port"
|
||||||
|
"dst_ip" => "dest_ip"
|
||||||
|
}
|
||||||
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
# Cowrie
|
# Cowrie
|
||||||
|
Reference in New Issue
Block a user