diff --git a/userspace/engine/rule_loader_reader.cpp b/userspace/engine/rule_loader_reader.cpp index 517f2144..4d875cb4 100644 --- a/userspace/engine/rule_loader_reader.cpp +++ b/userspace/engine/rule_loader_reader.cpp @@ -650,7 +650,7 @@ void rule_loader::reader::read_item( if (check_update_expected(expected_keys, override_replace, "replace", "exceptions", ctx)) { - read_rule_exceptions(cfg, item, v.exceptions, ctx, true); + read_rule_exceptions(cfg, item, v.exceptions, ctx, false); } if (check_update_expected(expected_keys, override_replace, "replace", "output", ctx)) @@ -771,7 +771,7 @@ void rule_loader::reader::read_item( decode_optional_val(item, "warn_evttypes", v.warn_evttypes, ctx); decode_optional_val(item, "skip-if-unknown-filter", v.skip_if_unknown_filter, ctx); decode_tags(item, v.tags, ctx); - read_rule_exceptions(cfg, item, v.exceptions, ctx, has_append_flag); + read_rule_exceptions(cfg, item, v.exceptions, ctx, false); collector.define(cfg, v); } }