Skip to content

Commit 27f459c

Browse files
fix: pf-logs IPv6 service detection using empty string check (#1577)
1 parent 2ab4a07 commit 27f459c

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

parsers/s01-parse/firewallservices/pf-logs.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -39,7 +39,7 @@ description: "Identify dropped packets"
3939
onsuccess: next_stage
4040
statics:
4141
- meta: service
42-
expression: "evt.Parsed.ip4_proto != nil ? evt.Parsed.ip4_proto : evt.Parsed.ip6_proto"
42+
expression: "Lower(evt.Parsed.ip4_proto != '' ? evt.Parsed.ip4_proto : evt.Parsed.ip6_proto)"
4343
- meta: log_type
4444
value: pf_drop
4545
- meta: source_ip

0 commit comments

Comments
 (0)