From 6d0e85fcfaf5742ea78f877e2caf0a8ea04be1be Mon Sep 17 00:00:00 2001
From: Thomas Patzke <thomas@patzke.org>
Date: Tue, 24 Oct 2017 23:48:47 +0200
Subject: [PATCH] Fixed Splunk backend (#50)

---
 tools/backends.py | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/tools/backends.py b/tools/backends.py
index 219793989..be1a1183c 100644
--- a/tools/backends.py
+++ b/tools/backends.py
@@ -464,10 +464,10 @@ class SplunkBackend(SingleTextQueryBackend):
     listSeparator = " "
     valueExpression = "\"%s\""
     mapExpression = "%s=%s"
-    mapListsSpecialHandling = False
+    mapListsSpecialHandling = True
     mapListValueExpression = "%s IN %s"
 
-    def generateMapItemListNode(self, node):
+    def generateMapItemListNode(self, key, value):
         return "(" + (" OR ".join(['%s=%s' % (key, self.generateValueNode(item)) for item in value])) + ")"
 
     def generateAggregation(self, agg):