Skip to content

Commit 4eeab0b

Browse files
committed
Rolled back a modification
1 parent 36389f6 commit 4eeab0b

File tree

1 file changed

+5
-9
lines changed

1 file changed

+5
-9
lines changed

Parsers/ASimDns/Parsers/vimDnsFortinetFortigate.yaml

Lines changed: 5 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -95,15 +95,11 @@ ParserQuery: |
9595
"22", "BADTRUNC", "Failure",
9696
"23", "BADCOOKIE", "Failure"
9797
];
98-
let DnsResponseCodeNameLookup = iff(
99-
responsecodename == '*',
100-
'*',
101-
toscalar(
102-
EventOriginalResultDetailsLookup
103-
| where EventResultDetails =~ responsecodename
104-
| project EventOriginalResultDetails
105-
| take 1
106-
)
98+
let DnsResponseCodeNameLookup = toscalar(
99+
EventOriginalResultDetailsLookup
100+
| where not(disabled)
101+
| where (responsecodename == '*' or EventResultDetails =~ responsecodename)
102+
| project EventOriginalResultDetails
107103
);
108104
let DnsQueryTypeLookup = datatable(DnsQueryType:int, DnsQueryTypeName:string)[
109105
0, "Reserved",

0 commit comments

Comments
 (0)