diff --git a/resources/templates/default/sflow_enrichment.conf.erb b/resources/templates/default/sflow_enrichment.conf.erb index e4be1df..d8809d2 100644 --- a/resources/templates/default/sflow_enrichment.conf.erb +++ b/resources/templates/default/sflow_enrichment.conf.erb @@ -1,6 +1,6 @@ filter { <% @flow_nodes.each do |flow_node| %> - <% if !flow_node[:ipaddress].nil? and !flow_node["redborder"].nil? and flow_node["redborder"]["parent_id"].nil? and flow_node["redborder"]["blocked"]!=true %> + <% if !flow_node[:ipaddress].nil? and !flow_node["redborder"].nil? and flow_node["redborder"]["blocked"]!=true %> if [sensor_ip] == "<%=flow_node[:ipaddress].to_s%>" { mutate { add_field => {