diff --git a/site-modules/profile/templates/logstash/filter.conf.erb b/site-modules/profile/templates/logstash/filter.conf.erb
--- a/site-modules/profile/templates/logstash/filter.conf.erb
+++ b/site-modules/profile/templates/logstash/filter.conf.erb
@@ -30,6 +30,11 @@
       }
     }
   } else {
+    if [syslog][facility] !~ /^\d+$/ {
+      mutate {
+        rename => { "[syslog][facility]" => "[syslog][facility_name]" }
+      }
+    }
     if [@metadata][version] {
       mutate {
         add_field => {