diff --git a/recipes/syslog-pri/syslog.conf b/recipes/syslog-pri/syslog.conf index fdb7561..f7ae495 100644 --- a/recipes/syslog-pri/syslog.conf +++ b/recipes/syslog-pri/syslog.conf @@ -22,8 +22,8 @@ filter { } if !("_grokparsefailure" in [tags]) { mutate { - replace => [ "@source_host", "%{syslog_hostname}" ] - replace => [ "@message", "%{syslog_message}" ] + replace => [ "host", "%{syslog_hostname}" ] + replace => [ "message", "%{syslog_message}" ] } } mutate {