diff --git a/resources/templates/default/sflow_tagging.conf.erb b/resources/templates/default/sflow_tagging.conf.erb
index 45c0120..2a9bcf1 100644
--- a/resources/templates/default/sflow_tagging.conf.erb
+++ b/resources/templates/default/sflow_tagging.conf.erb
@@ -1,5 +1,11 @@
 filter {
   
+  # Default direction
+  mutate {
+    add_field => {
+      "direction" => "upstream"
+    }
+  }
 
   if ![tag] or [tag] == 0 {
     <% @flow_nodes.select{|s| s[:ipaddress] and s["redborder"] and s["redborder"]["homenets"] and !s["redborder"]["blocked"]}.each do |flow_node| %>