Correct the code example for adding alternative inputs

whyscream · Feb 4, 2024 · bc64147 · bc64147
1 parent e0e8cf5
commit bc64147
Showing 1 changed file with 5 additions and 3 deletions.
diff --git a/ALTERNATIVE-INPUTS.md b/ALTERNATIVE-INPUTS.md
@@ -7,9 +7,11 @@ Various other Logstash filters can produce the needed input fields (`program` an
 ----------------
 
 ``` 
-grok {
-    match => { "message" => "%{SYSLOGTIMESTAMP:timestamp} %{SYSLOGHOST} %{DATA:program}(?:\[%{POSINT}\])?: %{GREEDYDATA:message}" }
-    overwrite => ["timestamp", "message"]
+filter {
+    grok {
+        match => { "message" => "%{SYSLOGTIMESTAMP:timestamp} %{SYSLOGHOST} %{DATA:program}(?:\[%{POSINT}\])?: %{GREEDYDATA:message}" }
+        overwrite => ["timestamp", "message"]
+    }
 }
 ```