From 51ca6cc40ca9ee90fba04406bfe946d8640aa960 Mon Sep 17 00:00:00 2001 From: Andrew <a@3ilson.com> Date: Mon, 30 Sep 2019 22:19:16 -0400 Subject: [PATCH] Update 10-pf.conf --- conf.d/10-pf.conf | 6 ++---- 1 file changed, 2 insertions(+), 4 deletions(-) diff --git a/conf.d/10-pf.conf b/conf.d/10-pf.conf index f63f41b..3096982 100644 --- a/conf.d/10-pf.conf +++ b/conf.d/10-pf.conf @@ -11,10 +11,8 @@ filter { locale => "en" } mutate { - replace => [ "message", "%{msg}" ] - } - mutate { - remove_field => [ "msg" ] + copy => { "[message]" => "[event][original]"} + replace => [ "syslog_message", "%{message}" ] } } } -- GitLab