Dear I use logs-to-elastisearch script to send logs to ES when being given field names can not contain ".", So how to modify the log field name -------------- next part -------------- An HTML attachment was scrubbed... URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20160328/71c4a239/attachment.html