From 73461dcc7a013013dbdeff8b561eb6fc17b762fc Mon Sep 17 00:00:00 2001
From: Brian Grabau <brian_grabau@cargill.com>
Date: Wed, 25 Sep 2024 13:24:05 -0500
Subject: [PATCH] split tenable.asm on cve

---
 config/processors/vuln_tenable_asm.conf | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/config/processors/vuln_tenable_asm.conf b/config/processors/vuln_tenable_asm.conf
index 7e7dc65f..6325606a 100644
--- a/config/processors/vuln_tenable_asm.conf
+++ b/config/processors/vuln_tenable_asm.conf
@@ -171,6 +171,9 @@ filter {
   mutate {
     remove_field => [ "tmp" ]
   }
+  split {
+    field => "[vulnerability][id]"
+  }
 }
 output {
   pipeline { send_to => [enrichments] }