diff --git a/logstash/pipelines/zeek/1300_zeek_normalize.conf b/logstash/pipelines/zeek/1300_zeek_normalize.conf
index c9a091b18..d81d1bc80 100644
--- a/logstash/pipelines/zeek/1300_zeek_normalize.conf
+++ b/logstash/pipelines/zeek/1300_zeek_normalize.conf
@@ -17,7 +17,7 @@ filter {
                 'Low'
               when 3...7
                 'Medium'
-              when 7..10
+              when 7...10
                 'High'
               else
                 'None'