From 6368cd4675f92999c8a6c00d89e8b12471ae67fe Mon Sep 17 00:00:00 2001
From: 9S <strrrn@gmail.com>
Date: Wed, 25 Sep 2019 12:35:35 +0200
Subject: [PATCH] Update 20-dns-syslog.conf

---
 logstash/conf.d/20-dns-syslog.conf | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/logstash/conf.d/20-dns-syslog.conf b/logstash/conf.d/20-dns-syslog.conf
index 08daaae..be49924 100644
--- a/logstash/conf.d/20-dns-syslog.conf
+++ b/logstash/conf.d/20-dns-syslog.conf
@@ -73,7 +73,7 @@ filter {
 
 # to do cached and cached reverse
 
-      else if [message] =~ "cached" and [message] =~ "NXDOMAIN" {
+      if [message] =~ "cached" and [message] =~ "NXDOMAIN" {
         mutate {
           add_tag => [ "cached NXDOMAIN" ]
         }
@@ -91,7 +91,7 @@ filter {
         }
       }
 
-      if [request_from] and [message] =~ "query" {
+      else if [request_from] and [message] =~ "query" {
         mutate {
           add_tag => [ "request and query type" ]
         }
-- 
GitLab