Skip to content

Commit e382e39

Browse files
Resovle review comment by @kcreddy.
Remove splash_auth from the list while setting client.mac.
1 parent 3baaf2e commit e382e39

File tree

1 file changed

+1
-1
lines changed
  • packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline

1 file changed

+1
-1
lines changed

packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/events.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -232,7 +232,7 @@ processors:
232232
- rename:
233233
field: cisco_meraki.{{{cisco_meraki.event_subtype}}}.client_mac
234234
target_field: client.mac
235-
if: ctx.cisco_meraki?.event_subtype != null && ['dfs_event', 'association', 'disassociation', 'aps_association_reject', 'multiple_dhcp_servers_detected', 'wpa_deauth', 'wpa_auth', '8021x_eap_failure', '8021x_auth', '8021x_deauth', '8021x_eap_success', 'splash_auth', 'device_packet_flood'].contains(ctx.cisco_meraki.event_subtype)
235+
if: ctx.cisco_meraki?.event_subtype != null && ['dfs_event', 'association', 'disassociation', 'aps_association_reject', 'multiple_dhcp_servers_detected', 'wpa_deauth', 'wpa_auth', '8021x_eap_failure', '8021x_auth', '8021x_deauth', '8021x_eap_success', 'device_packet_flood'].contains(ctx.cisco_meraki.event_subtype)
236236
ignore_missing: true
237237
- rename:
238238
field: cisco_meraki.{{{cisco_meraki.event_subtype}}}.ip_src

0 commit comments

Comments
 (0)