diff --git a/logstash/pipelines/zeek/1300_zeek_normalize.conf b/logstash/pipelines/zeek/1300_zeek_normalize.conf index ba529dd71..9028fcc6d 100644 --- a/logstash/pipelines/zeek/1300_zeek_normalize.conf +++ b/logstash/pipelines/zeek/1300_zeek_normalize.conf @@ -1522,9 +1522,6 @@ filter { if ([zeek][http][resp_filenames]) { mutate { id => "mutate_merge_normalize_zeek_http_resp_filenames" merge => { "[file][path]" => "[zeek][http][resp_filenames]" } } } - if ([zeek][http][resp_filenames]) { mutate { id => "mutate_merge_normalize_zeek_http_resp_filenames" - merge => { "[file][path]" => "[zeek][http][resp_filenames]" } } } - if ([zeek][s7comm_upload_download][filename]) { mutate { id => "mutate_merge_normalize_zeek_s7comm_upload_download_filename" merge => { "[file][path]" => "[zeek][s7comm_upload_download][filename]" } } }