diff --git a/recipes/syslog-pri/syslog.conf b/recipes/syslog-pri/syslog.conf
index fdb7561..8514ce1 100644
--- a/recipes/syslog-pri/syslog.conf
+++ b/recipes/syslog-pri/syslog.conf
@@ -22,8 +22,10 @@ filter {
     }
     if !("_grokparsefailure" in [tags]) {
       mutate {
-        replace => [ "@source_host", "%{syslog_hostname}" ]
-        replace => [ "@message", "%{syslog_message}" ]
+        replace => { 
+	    "@source_host" => "%{syslog_hostname}"
+            "@message" => "%{syslog_message}"
+	}
       }
     }
     mutate {