fixed Provide Name suffix #359
This commit is contained in:
@@ -236,8 +236,9 @@ impl Detection {
|
||||
};
|
||||
let ch_str = &get_serde_number_to_string(&record_info.record["Event"]["System"]["Channel"])
|
||||
.unwrap_or_default();
|
||||
let provider =
|
||||
&get_serde_number_to_string(&record_info.record["Event"]["System"]["ProviderName"])
|
||||
let provider = &get_serde_number_to_string(
|
||||
&record_info.record["Event"]["System"]["Provider_attributes"]["Name"],
|
||||
)
|
||||
.unwrap_or_default();
|
||||
let eid = get_serde_number_to_string(&record_info.record["Event"]["System"]["EventID"])
|
||||
.unwrap_or_else(|| "-".to_owned());
|
||||
|
||||
Reference in New Issue
Block a user