diff --git a/2089_filter_section_h_example_severities.conf b/2089_filter_section_h_example_severities.conf index 6a9f42e..26f4e74 100644 --- a/2089_filter_section_h_example_severities.conf +++ b/2089_filter_section_h_example_severities.conf @@ -11,7 +11,7 @@ filter { ruby { code => " modsecSeverities = Set.new - trailerMsgs = event.get('auditLogTrailer[messages]') + trailerMsgs = event.get('auditLogTrailer')['messages'] trailerMsgs.each {|m| if m.key?('severity') modsecSeverities.add(m['severity'])