Can not access json.orig_bytes and json.resp_bytes in filebeat zeek's module

Hi ,
i want to bring zeek logs to Elasticsearch , but this two modules are not included

i have changed this file /usr/share/filebeat/module/zeek/connection/config/connection.yml
and delete this twi fields form drop fields , but nothing happed !
could ant one guide me what should i do to bring this two fields .
thanks .

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.