From 83a76ec0cd1444d5925eff2ee9d59d66b678c8a0 Mon Sep 17 00:00:00 2001 From: Sean Whalen Date: Tue, 25 Sep 2018 17:37:43 -0400 Subject: [PATCH] Fix aggregate report splunk conversion --- parsedmarc/splunk.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/parsedmarc/splunk.py b/parsedmarc/splunk.py index 19bd0d4..cf19051 100644 --- a/parsedmarc/splunk.py +++ b/parsedmarc/splunk.py @@ -89,7 +89,7 @@ class HECClient(object): if "dkim" in record["auth_results"]: new_report["dkim_results"] = record["auth_results"][ "dkim"] - if "spf" in record["spf_results"]: + if "spf" in record["auth_results"]: new_report["spf_results"] = record["auth_results"][ "spf"]