From 48c17393c87f2739767e50d4afce109f54e0393b Mon Sep 17 00:00:00 2001
From: Lee Hinman <57081003+leehinman@users.noreply.github.com>
Date: Thu, 23 Jan 2020 10:55:23 -0600
Subject: [PATCH] Fix typos in zeek notice fileset config file (#15765)

Fixes #15764
---
 CHANGELOG.next.asciidoc                              | 1 +
 x-pack/filebeat/module/zeek/notice/config/notice.yml | 4 ++--
 2 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/CHANGELOG.next.asciidoc b/CHANGELOG.next.asciidoc
index 3c9f1465f84..0151bc8c467 100644
--- a/CHANGELOG.next.asciidoc
+++ b/CHANGELOG.next.asciidoc
@@ -51,6 +51,7 @@ https://github.com/elastic/beats/compare/v7.0.0-alpha2...master[Check the HEAD d
 
 - cisco/asa fileset: Fix parsing of 302021 message code. {pull}14519[14519]
 - Fix filebeat azure dashboards, event category should be `Alert`. {pull}14668[14668]
+- Fix typos in zeek notice fileset config file. {issue}15764[15764] {pull}15765[15765]
 
 *Heartbeat*
 
diff --git a/x-pack/filebeat/module/zeek/notice/config/notice.yml b/x-pack/filebeat/module/zeek/notice/config/notice.yml
index 67a57970b44..7f5c9c0869c 100644
--- a/x-pack/filebeat/module/zeek/notice/config/notice.yml
+++ b/x-pack/filebeat/module/zeek/notice/config/notice.yml
@@ -56,7 +56,7 @@ processors:
           to: "zeek.notice.file.id"
 
         - from: "zeek.notice.f.parent_id"
-          to: "dzeek.notice.file.parent_id"
+          to: "zeek.notice.file.parent_id"
 
         - from: "zeek.notice.f.source"
           to: "zeek.notice.file.source"
@@ -70,7 +70,7 @@ processors:
         - from: "zeek.notice.f.total_bytes"
           to: "zeek.notice.file.total_bytes"
 
-        - from: "zzeek.notice.file_mime_type"
+        - from: "zeek.notice.file_mime_type"
           to: "zeek.notice.file.mime_type"
 
       ignore_missing: true