Removed First Timestamp and Last Timestamp with -d option #707
- 1. [x] Unified output one table with -s and -d option
- 2. [] add channel column to table output
- 3. [x] Remove First Timestamp and Last Timestamp with -d option
- 4. [] Output csv with -o and -s option
- 5. [x] Separete two column Count and Percent
- 6. [x] change table format output crate from prettytable-rs to comfy_table.
This commit is contained in:
@@ -93,7 +93,6 @@ impl EventMetrics {
|
|||||||
};
|
};
|
||||||
|
|
||||||
}
|
}
|
||||||
// return evtstat_map;
|
|
||||||
}
|
}
|
||||||
// Login event
|
// Login event
|
||||||
fn stats_login_eventid(&mut self, records: &[EvtxRecordInfo]) {
|
fn stats_login_eventid(&mut self, records: &[EvtxRecordInfo]) {
|
||||||
|
|||||||
@@ -43,11 +43,15 @@ impl Timeline {
|
|||||||
}
|
}
|
||||||
// 出力メッセージ作成
|
// 出力メッセージ作成
|
||||||
let mut sammsges: Vec<String> = Vec::new();
|
let mut sammsges: Vec<String> = Vec::new();
|
||||||
sammsges.push("---------------------------------------".to_string());
|
let total_event_record = format!("\nTotal Event Records: {}\n", self.stats.total);
|
||||||
sammsges.push(format!("Evtx File Path: {}", self.stats.filepath));
|
if CONFIG.read().unwrap().args.filepath.is_some() {
|
||||||
sammsges.push(format!("Total Event Records: {}\n", self.stats.total));
|
sammsges.push(format!("Evtx File Path: {}", self.stats.filepath));
|
||||||
sammsges.push(format!("First Timestamp: {}", self.stats.start_time));
|
sammsges.push(total_event_record);
|
||||||
sammsges.push(format!("Last Timestamp: {}\n", self.stats.end_time));
|
sammsges.push(format!("First Timestamp: {}", self.stats.start_time));
|
||||||
|
sammsges.push(format!("Last Timestamp: {}\n", self.stats.end_time));
|
||||||
|
} else {
|
||||||
|
sammsges.push(total_event_record);
|
||||||
|
}
|
||||||
|
|
||||||
let mut stats_tb = Table::new();
|
let mut stats_tb = Table::new();
|
||||||
stats_tb.load_preset(UTF8_FULL).apply_modifier(UTF8_ROUND_CORNERS);
|
stats_tb.load_preset(UTF8_FULL).apply_modifier(UTF8_ROUND_CORNERS);
|
||||||
|
|||||||
Reference in New Issue
Block a user