From 6aadb8b391866623942155b1de77be8776202ffa Mon Sep 17 00:00:00 2001
From: rfaircloth-splunk <rfaircloth@splunk.com>
Date: Thu, 5 Mar 2020 15:53:45 -0500
Subject: [PATCH] Update lp-zscaler_lss.conf.tmpl

---
 package/etc/conf.d/log_paths/lp-zscaler_lss.conf.tmpl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/package/etc/conf.d/log_paths/lp-zscaler_lss.conf.tmpl b/package/etc/conf.d/log_paths/lp-zscaler_lss.conf.tmpl
index ca822aa..3df79f6 100644
--- a/package/etc/conf.d/log_paths/lp-zscaler_lss.conf.tmpl
+++ b/package/etc/conf.d/log_paths/lp-zscaler_lss.conf.tmpl
@@ -1,7 +1,7 @@
 # Zscaler
 
 {{- /* The following provides a unique port source configuration if env var(s) are set */}}
-{{- $context := dict "port_id" "ZSCALER_LSS" "parser" "rfc3164" }}
+{{- $context := dict "port_id" "ZSCALER_LSS" "parser" "common" }}
 {{- tmpl.Exec "t/source_network.t" $context }}
 
 log {