diff --git a/misp_modules/modules/expansion/eql.py b/misp_modules/modules/expansion/eql.py index fc64671..1a7bc77 100644 --- a/misp_modules/modules/expansion/eql.py +++ b/misp_modules/modules/expansion/eql.py @@ -62,7 +62,7 @@ def handler(q=False): if attrType: eqlType = fieldmap[attrType] - event_type = event_type[eqlType] + event_type = event_types[eqlType] fullEql = "{} where {} == \"{}\"".format(event_type, eqlType, request[attrType]) else: misperrors['error'] = "Unsupported attributes type"