diff --git a/cmd/crowdsec/output.go b/cmd/crowdsec/output.go index 88e85e04b..52bc04e3a 100644 --- a/cmd/crowdsec/output.go +++ b/cmd/crowdsec/output.go @@ -144,10 +144,6 @@ LOOP: buckets.Bucket_map.Delete(event.Overflow.Mapkey) break } - if event.Overflow.Reprocess { - log.Debugf("Overflow being reprocessed.") - input <- event - } /* process post overflow parser nodes */ event, err := parser.Parse(postOverflowCTX, event, postOverflowNodes) if err != nil { @@ -158,6 +154,10 @@ LOOP: log.Printf("[%s] is whitelisted, skip.", *event.Overflow.Alert.Message) continue } + if event.Overflow.Reprocess { + log.Debugf("Overflow being reprocessed.") + input <- event + } if dumpStates { continue }