Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Disable host.* fields by default for CrowdStrike module (#19132)
For the CrowdStrike module when data is forwarded to Filebeat from another host/device you don't want Filebeat to add `host`. So by default this modules add a `forwarded` tag to events. If you configure the module to not include the `forwarded` tag (e.g. `var.tags: [my_tag]`) then Filebeat will add the `host.*` fields. Relates: #13920
- Loading branch information