From 5f79644aeffa6f077eb9052869a20b78c02733df Mon Sep 17 00:00:00 2001
From: weslambert <wlambertts@gmail.com>
Date: Wed, 29 Nov 2023 10:02:13 -0500
Subject: [PATCH] Ignore analyzer log

---
 salt/elasticfleet/defaults.yaml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/salt/elasticfleet/defaults.yaml b/salt/elasticfleet/defaults.yaml
index 004dea94de..7d38838958 100644
--- a/salt/elasticfleet/defaults.yaml
+++ b/salt/elasticfleet/defaults.yaml
@@ -10,6 +10,7 @@ elasticfleet:
   logging:
     zeek:
       excluded:
+        - analyzer
         - broker
         - capture_loss
         - cluster