From 96f3549fc08cf0b4d71a75162f5e80350f9835b9 Mon Sep 17 00:00:00 2001
From: Debashis Mondal <36876095+DebashisMondal@users.noreply.github.com>
Date: Tue, 19 Mar 2019 15:23:24 +0530
Subject: [PATCH] [Filebeat] Fix of syslog parsing for Priority value <0> (
 #11010 ) (#11288)

---
 CHANGELOG.next.asciidoc        | 1 +
 filebeat/input/syslog/event.go | 2 +-
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/CHANGELOG.next.asciidoc b/CHANGELOG.next.asciidoc
index b3d4e85068d8..df9e7acea818 100644
--- a/CHANGELOG.next.asciidoc
+++ b/CHANGELOG.next.asciidoc
@@ -173,6 +173,7 @@ https://github.com/elastic/beats/compare/v7.0.0-alpha2...master[Check the HEAD d
   case. {issue}11004[11004] {pull}11105[11105]
 - Change URLPATH grok pattern to support brackets. {issue}11135[11135] {pull}11252[11252]
 - Add support for iis log with different address format. {issue}11255[11255] {pull}11256[11256]
+- Add fix to parse syslog message with priority value 0. {issue}11010[11010]
 
 *Heartbeat*
 
diff --git a/filebeat/input/syslog/event.go b/filebeat/input/syslog/event.go
index 6a83a69d653e..c5eccd6ea67f 100644
--- a/filebeat/input/syslog/event.go
+++ b/filebeat/input/syslog/event.go
@@ -218,7 +218,7 @@ func (s *event) Priority() int {
 
 // HasPriority returns if the priority was in original event.
 func (s *event) HasPriority() bool {
-	return s.priority > 0
+	return s.priority >= 0
 }
 
 // Severity returns the severity, will return -1 if priority is not set.