From 95bc02587bd1ad5d4dac00f61ecc6ac67f0caba0 Mon Sep 17 00:00:00 2001
From: ycz008 <yangchengzi@seethingx.com>
Date: Wed, 27 Sep 2023 15:33:09 +0800
Subject: [PATCH] update logstash

---
 dev-upgrade/elastic/logstash.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/dev-upgrade/elastic/logstash.yml b/dev-upgrade/elastic/logstash.yml
index 7b8dca3..9189cd5 100644
--- a/dev-upgrade/elastic/logstash.yml
+++ b/dev-upgrade/elastic/logstash.yml
@@ -18,7 +18,7 @@ data:
       }   
       mutate {
         split => { "[log][file][path]" => "/" }
-        add_field => { "env" => "%{[log][file][path][2]}" }
+        add_field => { "env" => "%{[log][file][path][3]}" }
       }
     }