From cdccd6914ac3623b6b6546cea651535c31578e18 Mon Sep 17 00:00:00 2001
From: David Iglesias Lopez <davidj.iglesias@wazuh.com>
Date: Mon, 15 Jun 2020 17:00:55 +0200
Subject: [PATCH] Update rule_id 65000 to look for integration: gcp

---
 rules/0690-gcp_rules.xml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/rules/0690-gcp_rules.xml b/rules/0690-gcp_rules.xml
index d9a9c2ce9..dc7b76744 100644
--- a/rules/0690-gcp_rules.xml
+++ b/rules/0690-gcp_rules.xml
@@ -12,8 +12,8 @@ ID: 65000 - 65499
     <!-- GCP wodle -->
     <rule id="65000" level="0">
         <decoded_as>json</decoded_as>
-        <field name="gcp.resource.labels.project_id">\.+</field>
-        <description>Google Cloud Pub/Sub alert</description>
+        <field name="integration">gcp</field>
+        <description>GCP alert.</description>
         <options>no_full_log</options>
     </rule>