From 64d050e587551e28f2032cebb58d7a9eeb9bccce Mon Sep 17 00:00:00 2001
From: Markus Opolka <markus.opolka@netways.de>
Date: Tue, 11 Aug 2026 15:45:30 +0200
Subject: [PATCH] Fix typo in tag_on_failure for grok filter

---
 filter-group.conf | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/filter-group.conf b/filter-group.conf
index 1021e84..aeb4d25 100644
--- a/filter-group.conf
+++ b/filter-group.conf
@@ -3,7 +3,7 @@ filter {
     grok {
       match => ["message","new group: name=%{DATA:[group][name]}, GID=%{NUMBER:[group][id]}"]
       id => "groupadd"
-      tag_on_failure => ["_grokparsefaillure","groupadd_grok_failed"]
+      tag_on_failure => ["_grokparsefailure","groupadd_grok_failed"]
     }
   }
-}
\ No newline at end of file
+}