From 7b0b832a89f4e25e502eb24e9bf5800c0de8c165 Mon Sep 17 00:00:00 2001
From: Andy Fowler <afowler@nutshell.com>
Date: Fri, 10 Jan 2014 17:03:36 -0500
Subject: [PATCH] fix syslog recipe for host / message schema change

---
 recipes/syslog-pri/syslog.conf | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/recipes/syslog-pri/syslog.conf b/recipes/syslog-pri/syslog.conf
index fdb7561..f7ae495 100644
--- a/recipes/syslog-pri/syslog.conf
+++ b/recipes/syslog-pri/syslog.conf
@@ -22,8 +22,8 @@ filter {
     }
     if !("_grokparsefailure" in [tags]) {
       mutate {
-        replace => [ "@source_host", "%{syslog_hostname}" ]
-        replace => [ "@message", "%{syslog_message}" ]
+        replace => [ "host", "%{syslog_hostname}" ]
+        replace => [ "message", "%{syslog_message}" ]
       }
     }
     mutate {