File tree Expand file tree Collapse file tree 4 files changed +8
-3
lines changed
packages/fortinet_fortiproxy
elasticsearch/ingest_pipeline Expand file tree Collapse file tree 4 files changed +8
-3
lines changed Original file line number Diff line number Diff line change 28462846 "proxy" : {
28472847 "authid" : " 999-WGS-AUTH-DEFAULT" ,
28482848 "authproto" : " HTTP(10.0.0.175)" ,
2849- "logver" : " 704080649" ,
2849+ "logver" : 704080649 ,
28502850 "status" : " failure" ,
28512851 "subtype" : " user" ,
28522852 "type" : " event" ,
Original file line number Diff line number Diff line change @@ -213,6 +213,11 @@ processors:
213213 field: _fields_.wanout
214214 type: long
215215 ignore_missing: true
216+ - convert:
217+ tag: convert_logver
218+ field: _fields_.logver
219+ type: long
220+ ignore_missing: true
216221
217222# ------------------------------------------------------------------------------
218223# Enrich fields.
Original file line number Diff line number Diff line change 12021202 description : >-
12031203 SSH login Name
12041204 - name : logver
1205- type : integer
1205+ type : long
12061206 description : >-
12071207 Log version
12081208 - name : lowcount
Original file line number Diff line number Diff line change @@ -546,7 +546,7 @@ An example event for `log` looks as following:
546546| fortinet.proxy.locport | Local Port | long |
547547| fortinet.proxy.log | Log Name for Log Rotation | keyword |
548548| fortinet.proxy.login | SSH login Name | keyword |
549- | fortinet.proxy.logver | Log version | integer |
549+ | fortinet.proxy.logver | Log version | long |
550550| fortinet.proxy.lowcount | Security Rating result failed count for low severity | long |
551551| fortinet.proxy.mac | MAC Address | keyword |
552552| fortinet.proxy.masterdstmac | Destination master MAC address | keyword |
You can’t perform that action at this time.
0 commit comments