[PFsense] Fix Redundant Grok pattern (#3969)

* #3955: Fix Redundant Grok patter

* update changelog

packages/pfsense/changelog.yml

@@ -1,4 +1,9 @@
 # newer versions go on top
+- version: "1.3.1"
+  changes:
+    - description: Fix redundant Grok pattern
+      type: enhancement
+      link: https://github.com/elastic/integrations/pull/3969
 - version: "1.3.0"
   changes:
     - description: Add DHCPv6 support

packages/pfsense/data_stream/log/elasticsearch/ingest_pipeline/dhcp.yml

@@ -7,7 +7,7 @@ processors:
         - '%{DATA:_tmp.action}/%{INTERFACE:observer.ingress.interface.name}/%{MAC_ADDRESS:server.mac}/%{NOTSPACE:pfsense.dhcp.subnet}'
         - '%{DATA:_tmp.action} %{IPV6:client.address}(/%{NUMBER})? on %{INTERFACE:observer.ingress.interface.name}'
         - '%{DATA:_tmp.action} (from|to) %{IPV6:client.address} port %{POSINT:client.port:long}(, transaction ID %{NOTSPACE:pfsense.dhcp.transaction_id})?'
-        - '%{DATA:_tmp.action} for: %{IPV6:client.address}(, age %{POSINT:pfsense.dhcp.age:long} secs %{DATA})?%{GREEDYDATA}?'
+        - '%{DATA:_tmp.action} for: %{IPV6:client.address}(, age %{POSINT:pfsense.dhcp.age:long} secs)?%{GREEDYDATA}'
         - '%{DATA:_tmp.action}: address %{IPV6:client.address} to client with duid %{DUID:pfsense.dhcp.duid} iaid = -%{NOTSPACE:pfsense.dhcp.iaid} valid for %{POSINT:pfsense.dhcp.lease_time:long} seconds'
         - '%{WORD:event.action} %{MIDDLE} via %{INTERFACE:observer.ingress.interface.name}'
         - '%{DATA:_tmp.action} %{IPV6:client.address}'

packages/pfsense/manifest.yml

@@ -1,6 +1,6 @@
 name: pfsense
 title: pfSense
-version: "1.3.0"
+version: "1.3.1"
 release: ga
 description: Collect logs from pfSense and OPNsense with Elastic Agent.
 type: integration