update docs

Author: legoguy1000

filebeat/docs/modules/snort.asciidoc

@@ -63,15 +63,6 @@ which causes both ECS and custom fields under `rsa` to be added.
 Flag to control the addition of the raw parser fields to the event. This fields
 will be found under `rsa.raw`. The default is false.
 
-`var.internal_networks`::
-
-A list of CIDR ranges describing the IP addresses that
-you consider internal. This is used in determining the value of
-`network.direction`. The values
-can be either a CIDR value or one of the named ranges supported by the
-<<condition-network, `network`>> condition. The default value is `[private]`
-which classifies RFC 1918 (IPv4) and RFC 4193 (IPv6) addresses as internal.
-
 :has-dashboards!:
 
 :fileset_ex!:

filebeat/docs/modules/sonicwall.asciidoc

@@ -63,15 +63,6 @@ which causes both ECS and custom fields under `rsa` to be added.
 Flag to control the addition of the raw parser fields to the event. This fields
 will be found under `rsa.raw`. The default is false.
 
-`var.internal_networks`::
-
-A list of CIDR ranges describing the IP addresses that
-you consider internal. This is used in determining the value of
-`network.direction`. The values
-can be either a CIDR value or one of the named ranges supported by the
-<<condition-network, `network`>> condition. The default value is `[private]`
-which classifies RFC 1918 (IPv4) and RFC 4193 (IPv6) addresses as internal.
-
 :has-dashboards!:
 
 :fileset_ex!:

x-pack/filebeat/module/snort/_meta/docs.asciidoc

@@ -58,15 +58,6 @@ which causes both ECS and custom fields under `rsa` to be added.
 Flag to control the addition of the raw parser fields to the event. This fields
 will be found under `rsa.raw`. The default is false.
 
-`var.internal_networks`::
-
-A list of CIDR ranges describing the IP addresses that
-you consider internal. This is used in determining the value of
-`network.direction`. The values
-can be either a CIDR value or one of the named ranges supported by the
-<<condition-network, `network`>> condition. The default value is `[private]`
-which classifies RFC 1918 (IPv4) and RFC 4193 (IPv6) addresses as internal.
-
 :has-dashboards!:
 
 :fileset_ex!:

x-pack/filebeat/module/sonicwall/_meta/docs.asciidoc

@@ -58,15 +58,6 @@ which causes both ECS and custom fields under `rsa` to be added.
 Flag to control the addition of the raw parser fields to the event. This fields
 will be found under `rsa.raw`. The default is false.
 
-`var.internal_networks`::
-
-A list of CIDR ranges describing the IP addresses that
-you consider internal. This is used in determining the value of
-`network.direction`. The values
-can be either a CIDR value or one of the named ranges supported by the
-<<condition-network, `network`>> condition. The default value is `[private]`
-which classifies RFC 1918 (IPv4) and RFC 4193 (IPv6) addresses as internal.
-
 :has-dashboards!:
 
 :fileset_ex!: