From 38d3b04cd08119ce37dfee05e11e686ccc2bd4e7 Mon Sep 17 00:00:00 2001
From: Rainer Gerhards <rgerhards@adiscon.com>
Date: Mon, 10 Sep 2012 12:41:56 +0200
Subject: imuxsock: use CEE root for trusted properties

... in order to keep in line with current lumberjack schema
---
 plugins/imuxsock/imuxsock.c | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

(limited to 'plugins')

diff --git a/plugins/imuxsock/imuxsock.c b/plugins/imuxsock/imuxsock.c
index 61ce857c..bb0e998f 100644
--- a/plugins/imuxsock/imuxsock.c
+++ b/plugins/imuxsock/imuxsock.c
@@ -879,7 +879,10 @@ SubmitMsg(uchar *pRcv, int lenRcv, lstn_t *pLstn, struct ucred *cred, struct tim
 	parse++; lenMsg--; /* '>' */
 
 	if(json != NULL) {
-		msgAddJSON(pMsg, (uchar*)"!trusted", json);
+		/* as per lumberjack spec, these properties need to go into
+		 * the CEE root.
+		 */
+		msgAddJSON(pMsg, (uchar*)"!", json);
 	}
 
 	if(ts == NULL) {
-- 
cgit