From 33e743c8fc10e5f7e35b98bb71455667d13aaa7a Mon Sep 17 00:00:00 2001
From: DustInDark <nextsasasa@gmail.com>
Date: Tue, 21 Dec 2021 02:13:01 +0900
Subject: [PATCH] changed parse file error stderr to filewrite #301

---
 src/detections/rule/count.rs | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/src/detections/rule/count.rs b/src/detections/rule/count.rs
index b150a916..133b9e31 100644
--- a/src/detections/rule/count.rs
+++ b/src/detections/rule/count.rs
@@ -70,7 +70,12 @@ fn get_alias_value_in_record(
         }
         None => {
             AlertMessage::alert(
-                &mut std::io::stderr().lock(),
+                &mut BufWriter::new(
+                    OpenOptions::new()
+                        .append(true)
+                        .open(ERROR_LOG_PATH.to_string())
+                        .unwrap(),
+                ),
                 match is_by_alias {
                     true => format!(
             "count by clause alias value not found in count process. rule file:{} EventID:{}",