diff --git a/configs/ps-intake.conf b/configs/ps-intake.conf index fb82d7b..6d8973f 100644 --- a/configs/ps-intake.conf +++ b/configs/ps-intake.conf @@ -14,6 +14,7 @@ filter { copy => { "@timestamp" => "ingest_timestamp" } copy => { "[test][spec][source]" => "src_host" } copy => { "[test][spec][dest]" => "dest_host" } + copy => { "[tool][name]" => "tool_name" } rename => { "id" => "[@metadata][id]" } }