diff --git a/scripts/base/frameworks/cluster/telemetry.zeek b/scripts/base/frameworks/cluster/telemetry.zeek index 879f8a9770..a743cd0107 100644 --- a/scripts/base/frameworks/cluster/telemetry.zeek +++ b/scripts/base/frameworks/cluster/telemetry.zeek @@ -29,7 +29,6 @@ export { ## Map to an empty string to skip recording a specific metric ## completely. const topic_normalizations: table[pattern] of string = { - [/^zeek\.cluster\.nodeid\..*/] = "zeek.cluster.nodeid.__normalized__", [/^zeek\/cluster\/nodeid\/.*/] = "zeek/cluster/nodeid/__normalized__", } &ordered &redef; diff --git a/scripts/policy/frameworks/cluster/backend/zeromq/main.zeek b/scripts/policy/frameworks/cluster/backend/zeromq/main.zeek index 255be89ce4..dd1e28fe86 100644 --- a/scripts/policy/frameworks/cluster/backend/zeromq/main.zeek +++ b/scripts/policy/frameworks/cluster/backend/zeromq/main.zeek @@ -257,6 +257,10 @@ function zeromq_nodeid_topic(id: string): string { return nodeid_topic_prefix + "." + id + "."; } +redef Cluster::Telemetry::topic_normalizations += { + [/^zeek\.cluster\.nodeid\..*/] = "zeek.cluster.nodeid.__normalized__", +}; + # Unique identifier for this node with some debug information. const my_node_id = fmt("zeromq_%s_%s_%s_%s", Cluster::node, gethostname(), getpid(), unique_id("N"));