rename conpot fields to match index pattern

2025-07-02 01:27:27 -04:00 · 2018-08-28 13:30:58 +02:00
parent d19d3823f6
commit 79bb324a4a
1 changed files with 6 additions and 0 deletions
--- a/docker/elk/logstash/dist/logstash.conf
+++ b/docker/elk/logstash/dist/logstash.conf
@ -170,6 +170,12 @@ filter {
    date {
      match => [ "timestamp", "ISO8601" ]
    }
+    mutate {                                                                                                                                                                                                                                                              
+      rename => {                                                                                                                                                                                                                                                         
+        "dst_port" => "dest_port"                                                                                                                                                                                                                                         
+        "dst_ip" => "dest_ip"                                                                                                                                                                                                                                             
+      }                                                                                                                                                                                                                                                                   
+    }                                                                                                                                                                                                                                                                     
  }

 # Cowrie