Update MutateFilter.md
Correct syntax of JSON example. There was a missing comma.
This commit is contained in:
@@ -19,14 +19,14 @@ If present, the condition must evaluate to true in order for the remaining opera
|
|||||||
then the operation(s) will be executed in order.
|
then the operation(s) will be executed in order.
|
||||||
```json
|
```json
|
||||||
"Filters": [
|
"Filters": [
|
||||||
{
|
{
|
||||||
"mutate": {
|
"mutate": {
|
||||||
"condition": "\"[type]\" == \"Win32-EventLog\""
|
"condition": "\"[type]\" == \"Win32-EventLog\"",
|
||||||
"rename": [
|
"rename": [
|
||||||
"ComputerName", "Host"
|
"ComputerName", "Host"
|
||||||
]
|
]
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
]
|
]
|
||||||
```
|
```
|
||||||
The above example will rename ComputerName to Host only for Win32-EventLog types.
|
The above example will rename ComputerName to Host only for Win32-EventLog types.
|
||||||
|
|||||||
Reference in New Issue
Block a user