From 6368cd4675f92999c8a6c00d89e8b12471ae67fe Mon Sep 17 00:00:00 2001 From: 9S <strrrn@gmail.com> Date: Wed, 25 Sep 2019 12:35:35 +0200 Subject: [PATCH] Update 20-dns-syslog.conf --- logstash/conf.d/20-dns-syslog.conf | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/logstash/conf.d/20-dns-syslog.conf b/logstash/conf.d/20-dns-syslog.conf index 08daaae..be49924 100644 --- a/logstash/conf.d/20-dns-syslog.conf +++ b/logstash/conf.d/20-dns-syslog.conf @@ -73,7 +73,7 @@ filter { # to do cached and cached reverse - else if [message] =~ "cached" and [message] =~ "NXDOMAIN" { + if [message] =~ "cached" and [message] =~ "NXDOMAIN" { mutate { add_tag => [ "cached NXDOMAIN" ] } @@ -91,7 +91,7 @@ filter { } } - if [request_from] and [message] =~ "query" { + else if [request_from] and [message] =~ "query" { mutate { add_tag => [ "request and query type" ] } -- GitLab