Fetching Cisco , Firewall logs from syslog-ng server

Elastic Security SIEM
11

@tudor
can you help me with the syntax , here is what i have:

PUT _ingest/pipeline/my_pipeline_id
{
  "description" : "describe pipeline",
  "processors" : [
    {
      "dissect" : {
        "tokenizer": "/opt/%{host.name}/",
        "field": "log.file.path"
      }
    }
  ]
}

I still see the localhost in host.name instead of the one it processes from log.file.path

I have ran this through Kibanna UI