Skip to content

Commit cdd1e8c

Browse files
committed
Fixed parser for SlackAuditV2_CL
1 parent 2e20f3a commit cdd1e8c

File tree

1 file changed

+5
-5
lines changed

1 file changed

+5
-5
lines changed

Solutions/SlackAudit/Parsers/SlackAudit.yaml

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -204,8 +204,8 @@ FunctionQuery: |
204204
EntityChannelId=tostring(entity.channel.id),
205205
EntityChannelPrivacy=tostring(entity.channel.privacy),
206206
EntityChannelName=tostring(entity.channel.name),
207-
EntityChannelIsShared=tobool(entity.channel.is.shared),
208-
EntityChannelIsOrgShared=tobool(entity.channel.is.org.shared),
207+
EntityChannelIsShared=tobool(entity.channel.is_shared),
208+
EntityChannelIsOrgShared=tobool(entity.channel.is_org_shared),
209209
DetailsType=tostring(details.type),
210210
EntityUserId=tostring(entity.user.id),
211211
EntityUserName=tostring(entity.user.name),
@@ -226,8 +226,8 @@ FunctionQuery: |
226226
ContextLocationName=tostring(context.location.name),
227227
ContextLocationDomain=tostring(context.location.domain),
228228
ContextUA=tostring(context.ua),
229-
ContextIpAddress=tostring(context.ip.address),
230-
ContextSessionId=todouble(context.session.id),
229+
ContextIpAddress=tostring(context.ip_address),
230+
ContextSessionId=todouble(context.session_id),
231231
ActionDescription=column_ifexists('ActionDescription', ''),
232232
EventId=column_ifexists('Id', ''),
233233
EventEndTime=column_ifexists('DateCreate', ''),
@@ -236,7 +236,7 @@ FunctionQuery: |
236236
SrcUserName=tostring(actor.user.name),
237237
SrcUserEmail=tostring(actor.user.email),
238238
UserAgentOriginal=tostring(context.ua),
239-
SrcIpAddr=tostring(context.ip.address),
239+
SrcIpAddr=tostring(context.ip_address),
240240
DvcActionDesc=column_ifexists('ActionDescription', '')
241241
};
242242
union isfuzzy=true

0 commit comments

Comments
 (0)