From c42c53f1412efdf8deccc9d6fdbbb68fbd9b4196 Mon Sep 17 00:00:00 2001
From: mtudisco49 <54040976+mtudisco49@users.noreply.github.com>
Date: Wed, 21 Aug 2019 12:10:16 -0300
Subject: [PATCH] Update 2089_filter_section_h_example_severities.conf

Changed line
event.get('auditLogTrailer[messages]')
to
event.get('auditLogTrailer')['messages']

with previous line we got error: Ruby exception occurred: Invalid FieldReference: `auditLogTrailer[messages]
---
 2089_filter_section_h_example_severities.conf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/2089_filter_section_h_example_severities.conf b/2089_filter_section_h_example_severities.conf
index 6a9f42e..26f4e74 100644
--- a/2089_filter_section_h_example_severities.conf
+++ b/2089_filter_section_h_example_severities.conf
@@ -11,7 +11,7 @@ filter {
     ruby {
       code => "
           modsecSeverities = Set.new
-          trailerMsgs = event.get('auditLogTrailer[messages]')
+          trailerMsgs = event.get('auditLogTrailer')['messages']
           trailerMsgs.each {|m|
             if m.key?('severity')
               modsecSeverities.add(m['severity'])