Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Cherry-pick #19107 to 7.x: Allow host.* fields to be disabled in Suricata module #19293

Merged
merged 3 commits into from
Jun 26, 2020

Commits on Jun 18, 2020

  1. Allow host.* fields to be disabled in Suricata module (elastic#19107)

    If `forwarded` as configured as a tag (e.g. `var.tags: [forwarded]`) for the Suricata module then Filebeat will not add `host` fields to events. This is for use cases where Suricata is analyzing forwarded data (like from a network tap or mirror port).
    
    Relates: elastic#13920
    (cherry picked from commit 79d79bf)
    andrewkroh committed Jun 18, 2020
    Configuration menu
    Copy the full SHA
    5cf25c2 View commit details
    Browse the repository at this point in the history

Commits on Jun 26, 2020

  1. Configuration menu
    Copy the full SHA
    3c2b300 View commit details
    Browse the repository at this point in the history
  2. Configuration menu
    Copy the full SHA
    26de742 View commit details
    Browse the repository at this point in the history