can't write to aliases dumbkoff

mmguero-dev · Feb 13, 2025 · 41ef918 · 41ef918
1 parent 350aa20
commit 41ef918
Showing 1 changed file with 0 additions and 6 deletions.
diff --git a/logstash/pipelines/beats/13_normalize.conf b/logstash/pipelines/beats/13_normalize.conf
@@ -280,20 +280,14 @@ filter {
         if ([process][hash][sha1]) {
           mutate { id => "mutate_merge_eventdata_related_hash_sha1"
                    merge => { "[related][hash]" => "[process][hash][sha1]" } }
-          mutate { id => "mutate_merge_eventdata_hash_sha1"
-                   merge => { "[hash][sha1]" => "[process][hash][sha1]" } }
         }
         if ([process][hash][md5]) {
           mutate { id => "mutate_merge_eventdata_related_hash_md5"
                    merge => { "[related][hash]" => "[process][hash][md5]" } }
-          mutate { id => "mutate_merge_eventdata_hash_md5"
-                   merge => { "[hash][md5]" => "[process][hash][md5]" } }
         }
         if ([process][hash][sha256]) {
           mutate { id => "mutate_merge_eventdata_related_hash_sha256"
                    merge => { "[related][hash]" => "[process][hash][sha256]" } }
-          mutate { id => "mutate_merge_eventdata_hash_sha256"
-                   merge => { "[hash][sha256]" => "[process][hash][sha256]" } }
         }
         if ([pe][imphash]) {
           mutate { id => "mutate_merge_eventdata_related_hash_imphash"