Merge 50beeef63a into c556d02a30

docker/elk/logstash/dist/http_output.conf

@@ -698,15 +698,12 @@ filter {
       remove_field => ["event_timestamp"]
     }
     mutate {
-      split => ["source_ip", ":"]
-      rename => { "destination_ip" => "dest_ip" }
+      rename => {
+        "source_ip" => "src_ip"
+        "destination_ip" => "dest_ip"
+      }
       add_field => { "dest_port" => "5060" }
     }
-    mutate {
-      add_field => { "src_ip" => "%{[source_ip][0]}" }
-      add_field => { "src_port" => "%{[source_ip][1]}" }
-      remove_field => ["source_ip"]
-    }
   }
 
 # Tanner

docker/elk/logstash/dist/logstash.conf

@@ -698,15 +698,12 @@ filter {
       remove_field => ["event_timestamp"]
     }
     mutate {
-      split => ["source_ip", ":"]
-      rename => { "destination_ip" => "dest_ip" }
+      rename => {
+        "source_ip" => "src_ip"
+        "destination_ip" => "dest_ip"
+      }
       add_field => { "dest_port" => "5060" }
     }
-    mutate {
-      add_field => { "src_ip" => "%{[source_ip][0]}" }
-      add_field => { "src_port" => "%{[source_ip][1]}" }
-      remove_field => ["source_ip"]
-    }
   }
 
 # Tanner