From 833d9eecc37e18452561c36c28eff5db43af7591 Mon Sep 17 00:00:00 2001 From: JuanSheba Date: Wed, 16 Oct 2024 12:56:07 +0100 Subject: [PATCH] Add namespace to template --- resources/templates/default/intrusion_tagging.conf.erb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/resources/templates/default/intrusion_tagging.conf.erb b/resources/templates/default/intrusion_tagging.conf.erb index fae87ba..1445aa7 100644 --- a/resources/templates/default/intrusion_tagging.conf.erb +++ b/resources/templates/default/intrusion_tagging.conf.erb @@ -14,6 +14,8 @@ if "_cidr_match_<%= sensor_name %>" in [tags] { mutate { add_field => { + "namespace" => "<%= sensor_data['fields']['namespace'] %>" + "namespace_uuid" => "<%= sensor_data['fields']['namespace_uuid'] %>" "organization" => "<%= sensor_data['fields']['organization'] %>" "organization_uuid" => "<%= sensor_data['fields']['organization_uuid']%>" "service_provider" => "<%= sensor_data['fields']['service_provider'] %>"