File tree Expand file tree Collapse file tree 2 files changed +2
-2
lines changed
packages/citrix_adc/data_stream/log/elasticsearch/ingest_pipeline Expand file tree Collapse file tree 2 files changed +2
-2
lines changed Original file line number Diff line number Diff line change @@ -147,7 +147,7 @@ processors:
147147 if: ctx.citrix_adc?.log?.status != null && ctx.citrix_adc.log.status.toLowerCase() == 'failure'
148148 - set:
149149 field: event.outcome
150- tag: set_event_outcome_failure
150+ tag: set_event_outcome_failure_login_failed
151151 value: failure
152152 if: ctx.citrix?.name != null && ctx.citrix.name == "LOGIN_FAILED"
153153 - set:
Original file line number Diff line number Diff line change @@ -197,7 +197,7 @@ processors:
197197 ignore_failure : true
198198 - grok :
199199 if : ctx.citrix_adc?.log?.client_version != null && ctx.citrix_adc.log.client_version != ''
200- tag : grok_protocol_version
200+ tag : grok_client_version
201201 field : citrix_adc.log.client_version
202202 patterns :
203203 - " ^%{DATA:tls.version_protocol}v%{DATA:tls.version}$"
You can’t perform that action at this time.
0 commit comments