split tenable.asm on cve

Cargill · Sep 25, 2024 · 73461dc · 73461dc
1 parent 133dc4d
commit 73461dc
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/config/processors/vuln_tenable_asm.conf b/config/processors/vuln_tenable_asm.conf
@@ -171,6 +171,9 @@ filter {
   mutate {
     remove_field => [ "tmp" ]
   }
+  split {
+    field => "[vulnerability][id]"
+  }
 }
 output {
   pipeline { send_to => [enrichments] }