diff --git a/tasks/install.yaml b/tasks/install.yaml
index cb43a37..e207eb2 100644
--- a/tasks/install.yaml
+++ b/tasks/install.yaml
@@ -6,7 +6,7 @@
     name: "rsyslog"
     state: "present"
     cache_valid_time: "120"
-  when: 'ansible_os_family == "Debian"'
+  when: 'ansible_facts["os_family"] == "Debian"'
 
 # install cronjob for logrotate
 - name: "add cron job for logrotate"
@@ -21,4 +21,4 @@
   ansible.builtin.apt:
     deb: "{{ splunk_forwarder_deb }}"
     state: "present"
-  when: 'ansible_os_family == "Debian"'
+  when: 'ansible_facts["os_family"] == "Debian"'