From 8048eebd393269f8523c919497a8703d9cae5b51 Mon Sep 17 00:00:00 2001
From: Alexander Gozman <a.gozman@securitycode.ru>
Date: Fri, 18 Jul 2014 20:34:23 +0400
Subject: [PATCH] Fix handling filetype for eve log

---
 src/output-json.c | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/src/output-json.c b/src/output-json.c
index 52d8b309fb..b8f6ff5ef4 100644
--- a/src/output-json.c
+++ b/src/output-json.c
@@ -386,7 +386,13 @@ OutputCtx *OutputJsonInitCtx(ConfNode *conf)
     output_ctx->DeInit = OutputJsonDeInitCtx;
 
     if (conf) {
-        const char *output_s = ConfNodeLookupChildValue(conf, "type");
+        const char *output_s = ConfNodeLookupChildValue(conf, "filetype");
+
+        // Backwards compatibility
+        if (output_s == NULL) {
+            output_s = ConfNodeLookupChildValue(conf, "type");
+        }
+
         if (output_s != NULL) {
             if (strcmp(output_s, "file") == 0) {
                 json_ctx->json_out = ALERT_FILE;