From 8b62c569922217841ff6e9f68695f838c571e207 Mon Sep 17 00:00:00 2001
From: "Lee E. Hinman" <lee.e.hinman@elastic.co>
Date: Wed, 29 Apr 2020 18:09:48 -0500
Subject: [PATCH] condense setting related.ip

---
 x-pack/filebeat/input/netflow/convert.go | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/x-pack/filebeat/input/netflow/convert.go b/x-pack/filebeat/input/netflow/convert.go
index eff8cb5f023..69d7a2ea6cd 100644
--- a/x-pack/filebeat/input/netflow/convert.go
+++ b/x-pack/filebeat/input/netflow/convert.go
@@ -320,9 +320,7 @@ func flowToBeatEvent(flow record.Record) (event beat.Event) {
 		event.Fields["network"] = ecsNetwork
 	}
 	if len(relatedIP) > 0 {
-		ecsRelated := common.MapStr{}
-		ecsRelated["ip"] = relatedIP
-		event.Fields["related"] = ecsRelated
+		event.Fields["related"] = common.MapStr{"ip": relatedIP}
 	}
 	return
 }