From 4050621326d29b0a9c9fe42cb8540778f51990c6 Mon Sep 17 00:00:00 2001
From: Miguelangel Freitas <miguelangel@wazuh.com>
Date: Mon, 2 Jul 2018 08:13:04 -0500
Subject: [PATCH] Updating logstash configuration

---
 logstash/config/01-wazuh.conf | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/logstash/config/01-wazuh.conf b/logstash/config/01-wazuh.conf
index ee23fb08..524b9005 100644
--- a/logstash/config/01-wazuh.conf
+++ b/logstash/config/01-wazuh.conf
@@ -26,14 +26,14 @@ filter {
     geoip {
         source => "@src_ip"
         target => "GeoLocation"
-        fields => ["city_name", "continent_code", "country_code2", "country_name", "region_name", "location"]
+        fields => ["city_name", "country_name", "region_name", "location"]
     }
     date {
         match => ["timestamp", "ISO8601"]
         target => "@timestamp"
     }
     mutate {
-        remove_field => [ "timestamp", "beat", "input_type", "tags", "count", "@version", "log", "offset", "type","@src_ip"]
+        remove_field => ["timestamp", "beat", "input_type", "tags", "count", "@version", "log", "offset", "type", "@src_ip", "host"]
     }
 }
 output {