From 146ae28c9463d1e850fa685321662f3d73fa97de Mon Sep 17 00:00:00 2001
From: Shubham Bhansali <shubham.bhansali@CDSYS.LOCAL>
Date: Mon, 15 Jun 2020 19:47:36 +0530
Subject: [PATCH] ADDON-26524: Modified log_path file for Cisco ISE

---
 package/etc/conf.d/log_paths/lp-cisco_ise.conf.tmpl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/package/etc/conf.d/log_paths/lp-cisco_ise.conf.tmpl b/package/etc/conf.d/log_paths/lp-cisco_ise.conf.tmpl
index aa1210d..1735865 100644
--- a/package/etc/conf.d/log_paths/lp-cisco_ise.conf.tmpl
+++ b/package/etc/conf.d/log_paths/lp-cisco_ise.conf.tmpl
@@ -91,7 +91,7 @@ log {
 
         parser {p_add_context_splunk(key("cisco_ise")); };
         parser (compliance_meta_by_source);
-        rewrite { set("$(template ${.splunk.sc4s_template} $(template t_msg_only))" value("MSG")); };
+        rewrite { set("$(template ${.splunk.sc4s_template} $(template t_hdr_msg))" value("MSG")); };
 
 {{- if or (conv.ToBool (getenv "SC4S_DEST_SPLUNK_HEC_GLOBAL" "yes")) (conv.ToBool (getenv "SC4S_DEST_CISCO_ISE_HEC" "no")) }}
         destination(d_hec);