From 51ca6cc40ca9ee90fba04406bfe946d8640aa960 Mon Sep 17 00:00:00 2001
From: Andrew <a@3ilson.com>
Date: Mon, 30 Sep 2019 22:19:16 -0400
Subject: [PATCH] Update 10-pf.conf

---
 conf.d/10-pf.conf | 6 ++----
 1 file changed, 2 insertions(+), 4 deletions(-)

diff --git a/conf.d/10-pf.conf b/conf.d/10-pf.conf
index f63f41b..3096982 100644
--- a/conf.d/10-pf.conf
+++ b/conf.d/10-pf.conf
@@ -11,10 +11,8 @@ filter {
       locale => "en"
     }
     mutate {
-      replace => [ "message", "%{msg}" ]
-    }
-    mutate {
-      remove_field => [ "msg" ]
+      copy => { "[message]" => "[event][original]"}
+      replace => [ "syslog_message", "%{message}" ]
     }
   }
 }
-- 
GitLab