diff --git a/lib/fluent/plugin/in_windows_eventlog2.rb b/lib/fluent/plugin/in_windows_eventlog2.rb index 1a9acb8..c361b44 100644 --- a/lib/fluent/plugin/in_windows_eventlog2.rb +++ b/lib/fluent/plugin/in_windows_eventlog2.rb @@ -150,7 +150,7 @@ class << self if @render_as_xml @keynames.delete('User') end - if !@render_as_xml && !@preserve_sid_on_hash + if !@render_as_xml && !@preserve_sid_on_hash @keynames.delete('UserID') end