Merge pull request #542 from Cargill/cisco_router_fix

cisco_router_fix
Cargill · Sep 27, 2024 · bdfb49d · bdfb49d
2 parents 5b9e998 + 6166fef
commit bdfb49d
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/config/processors/syslog_audit_cisco.router.conf b/config/processors/syslog_audit_cisco.router.conf
@@ -101,7 +101,7 @@ filter {
     tag_on_failure => "_dateparsefailure_ei"
   }
   mutate {
-    remove_field => [ "[tmp]"]
+    remove_field => [ "[tmp]", "[log][syslog]", "[observer][egress]", "[observer][ingress]" ]
   }
 }
 output {