diff --git a/config/processors/vuln_tenable_asm.conf b/config/processors/vuln_tenable_asm.conf index 7e7dc65f..6325606a 100644 --- a/config/processors/vuln_tenable_asm.conf +++ b/config/processors/vuln_tenable_asm.conf @@ -171,6 +171,9 @@ filter { mutate { remove_field => [ "tmp" ] } + split { + field => "[vulnerability][id]" + } } output { pipeline { send_to => [enrichments] }