Suricata Module missing mapping for tenant_id

Hello everybody

I'm posting this here because the contributing guidelines on GitHub state that issues should be posted here before opening one on GitHub.

The Suricata Filebeat Module is missing a mapping for the field "tenant_id". Can you please add a mapping to the module?

When using the multi tenancy feature from Suricata (see the tenant ID is indicated in the field suricata.eve.alert.tenant_id.

example alert (sanitized):

        "signature":"SURICATA HTTP missing Host header",
        "category":"Generic Protocol Command Decode",

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.