Update 11-pf.conf

27a2ff49 · Andrew · GitHub · 2cbb38d8 · 27a2ff49
Unverified Commit 27a2ff49 authored Sep 7, 2019 by Andrew Committed by GitHub Sep 7, 2019
--- a/11-pf.conf
+++ b/11-pf.conf
@@ -32,7 +32,7 @@ filter {
              }
              grok {
                  patterns_dir => ["/etc/logstash/conf.d/patterns"]
-                  match => [ "message", "%{PF_SURICATA}"]
+                  match => [ "message", "%{SURICATA}"]
             }
                if ![geoip] and [ids_src_ip] !~ /^(10\.|192\.168\.)/ {
                  geoip {