From b1c22ff0cafaf64cdc0e22244741a2be420c8689 Mon Sep 17 00:00:00 2001 From: Ryan Breen Date: Mon, 19 Jan 2015 11:14:39 -0500 Subject: [PATCH] Update MutateFilter.md Correct syntax of JSON example. There was a missing comma. --- TimberWinR/mdocs/MutateFilter.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/TimberWinR/mdocs/MutateFilter.md b/TimberWinR/mdocs/MutateFilter.md index f2aca0d..6079256 100644 --- a/TimberWinR/mdocs/MutateFilter.md +++ b/TimberWinR/mdocs/MutateFilter.md @@ -19,14 +19,14 @@ If present, the condition must evaluate to true in order for the remaining opera then the operation(s) will be executed in order. ```json "Filters": [ - { + { "mutate": { - "condition": "\"[type]\" == \"Win32-EventLog\"" + "condition": "\"[type]\" == \"Win32-EventLog\"", "rename": [ "ComputerName", "Host" ] } - } + } ] ``` The above example will rename ComputerName to Host only for Win32-EventLog types.