valitydev/osquery-1
14
0
Fork 0
mirror of https://github.com/valitydev/osquery-1.git synced 2024-11-07 18:08:53 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Grabbing additional data fields for windows event logs (#3183)

Browse Source
This commit is contained in:
Nick Anderson 2017-04-19 16:09:49 -07:00 committed by GitHub
parent 6ba48afef6
commit e3ebc47498
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
osquery/tables/events/windows/windows_events.cpp
View File

@ -66,7 +66,9 @@ void parseTree(const pt::ptree& tree, std::map<std::string, std::string>& res) {
if (nodeName.empty()) {
nodeName = node.first.empty() ? "DataElement" : node.first;
}
res[nodeName] = node.second.data();
res[nodeName] = res[nodeName] == ""
? node.second.data()
: res[nodeName] + "\r\n" + node.second.data();
parseTree(node.second, res);
}
}