diff --git a/stream_alert/rule_processor/classifier.py b/stream_alert/rule_processor/classifier.py index ed57d3775..d32fd5274 100644 --- a/stream_alert/rule_processor/classifier.py +++ b/stream_alert/rule_processor/classifier.py @@ -339,7 +339,7 @@ def _convert_type(cls, payload, schema): if key == 'streamalert:envelope_keys' and not isinstance(payload[key], dict): continue - cls._convert_type(payload[key], schema[key]) + return cls._convert_type(payload[key], schema[key]) elif isinstance(value, list): pass