From 6a051b45fdd86eeff25ad45c7aa1283c722b68a1 Mon Sep 17 00:00:00 2001 From: rjha-splunk Date: Wed, 20 Sep 2023 13:53:20 +0200 Subject: [PATCH] fix: postfilter automatic assignment --- .../conf.d/conflib/post-filter/app-postfilter-cisco_ise.conf | 2 +- .../post-filter/app-postfilter-vmware_vsphere_sdrsInjector.conf | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/package/etc/conf.d/conflib/post-filter/app-postfilter-cisco_ise.conf b/package/etc/conf.d/conflib/post-filter/app-postfilter-cisco_ise.conf index 3f277659fb..51dda02e82 100644 --- a/package/etc/conf.d/conflib/post-filter/app-postfilter-cisco_ise.conf +++ b/package/etc/conf.d/conflib/post-filter/app-postfilter-cisco_ise.conf @@ -55,7 +55,7 @@ block parser app-postfilter-cisco_ise() { }; }; -application app-postfilter-cisco_ise[sc4s-postfilter] { +application app-postfilter-cisco_ise[sc4s-finalfilter] { filter { program('CISE_' type(string) flags(prefix)) and "${.values.num}" != 1; diff --git a/package/etc/conf.d/conflib/post-filter/app-postfilter-vmware_vsphere_sdrsInjector.conf b/package/etc/conf.d/conflib/post-filter/app-postfilter-vmware_vsphere_sdrsInjector.conf index b482d379dc..2c02d6e9d0 100644 --- a/package/etc/conf.d/conflib/post-filter/app-postfilter-vmware_vsphere_sdrsInjector.conf +++ b/package/etc/conf.d/conflib/post-filter/app-postfilter-vmware_vsphere_sdrsInjector.conf @@ -43,7 +43,7 @@ block parser app-postfilter-vmware_vsphere_sdrsInjector() { }; }; -application app-postfilter-vmware_vsphere_sdrsInjector[sc4s-postfilter] { +application app-postfilter-vmware_vsphere_sdrsInjector[sc4s-finalfilter] { filter { ( program('sdrsInjector' type(string))