Merge pull request #7 from CERN-CERT/feat/fix_correlation

Add fix for correlation relabeling
CERN-CERT · May 31, 2023 · c595ef5 · c595ef5
2 parents 5ed4199 + c5dbebf
commit c595ef5
Showing 1 changed file with 8 additions and 2 deletions.
diff --git a/files/td-agent.conf b/files/td-agent.conf
@@ -73,6 +73,8 @@
 </source>
 
 
+## DATA ROUTING
+# Copying our pdnssocdata into multiple streams
 ## DATA ROUTING
 # Copying our pdnssocdata into multiple streams
 <match pdnssocdata>
@@ -83,9 +85,13 @@
         </store>
         <store>
          @type relabel
-         @label @pdnssocdata_correlate
+         @label @pdnssocdata_correlate_query
+        </store>
+        <store>
+         @type relabel
+         @label @pdnssocdata_correlate_response
         </store>
-        
+
         ## Send data to another pDNSSOC server
         #<store>
         # @type forward