[Bro] host field
Seth Hall
seth at icir.org
Tue Oct 4 19:49:09 PDT 2016
> On Oct 4, 2016, at 12:39 PM, James Lay <jlay at slave-tothe-box.net> wrote:
>
> "You can disable the check which prohibits dots in field names by
> starting Elasticsearch as follows:
Haha, I replied to the other email before reading the whole thread. I recommend this method instead!
.Seth
--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro.org/
More information about the Bro
mailing list