diff --git a/docs/elk/logstash-cowrie.conf b/docs/elk/logstash-cowrie.conf
index b1e09ca2..c4ea9552 100644
--- a/docs/elk/logstash-cowrie.conf
+++ b/docs/elk/logstash-cowrie.conf
@@ -17,6 +17,7 @@ filter {
     if [type] == "cowrie" {
         json {
 	    source => message
+            target => honeypot
 	}
 
         date {