Update packages/awsfirehose/data_stream/logs/elasticsearch/ingest_pipeline/default.yml

Co-authored-by: Andrew Gizas <andreas.gkizas@elastic.co>

Author: kaiyan-sheng

packages/awsfirehose/data_stream/logs/elasticsearch/ingest_pipeline/default.yml

@@ -43,7 +43,7 @@ processors:
  ctx.event.dataset = 'aws.firewall_logs';
  }
  
- // AWS Route53 Resolver Logs
+ // AWS Route53 Resolver Logs - This needs to be before the Route53 Public Logs
  else if (message_lower.contains('"version":') && message_lower.contains('"account_id":') && message_lower.contains('"region":') &&
  message_lower.contains('"vpc_id":') && message_lower.contains('"query_timestamp":')) {
  ctx.event.dataset = 'aws.route53_resolver_logs';