valitydev/osquery-1
14
0
Fork 0
mirror of https://github.com/valitydev/osquery-1.git synced 2024-11-07 18:08:53 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Filtering out LowBattery crash logs (#2080)

Browse Source 
The mobile 'LowBattery' crash logs provide little if any data of value,
and seem to be nothing more than notification events.  We're filtering
these out of the crashes table.
This commit is contained in:
Nick Anderson 2016-05-10 08:01:28 -07:00
parent 947799d28e
commit 2ac2eef3c8
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
osquery/tables/system/darwin/crashes.cpp
View File

@ -140,7 +140,8 @@ QueryData genCrashLogs(QueryContext& context) {
std::vector<std::string> files;
if (listFilesInDirectory(path, files)) {
for (const auto& lf : files) {
if (alg::ends_with(lf, ".crash")) {
if (alg::ends_with(lf, ".crash") &&
lf.find("LowBattery") == std::string::npos) {
Row r;
r["type"] = type;
readCrashDump(lf, r);