SUMO-0: explicitly remove outerfield for guardduty events

SumoLogic · Nov 30, 2017 · 448f815 · 448f815
1 parent 5211a8d
commit 448f815
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/cloudwatchevents/cloudwatchevents.js b/cloudwatchevents/cloudwatchevents.js
@@ -96,7 +96,7 @@ exports.handler = function (event, context) {
     }
 
     //console.log(event);
-    if ((event.source==="aws.guardduty") && (removeOuterFields)) {
+    if ((event.source==="aws.guardduty") || (removeOuterFields)) {
         final_event =event.detail;
     } else {
         final_event = event;