Skip to content

Conversation

@Watson1978
Copy link

@Watson1978 Watson1978 commented Oct 22, 2025

Fix #116

Previously, the parser assumed that field keys and values were always separated by tab characters ("\t" or "\t\t").

However, some event log entries may include the spaces as delimiters, it causes incorrect key-value splitting.

This patch updates the parser to correctly handle both tabs and spaces between fields.

@Watson1978 Watson1978 requested a review from daipom October 22, 2025 05:35
@Watson1978 Watson1978 changed the title in_windows_eventlog2: remove unexpected spaces due to retrieve Windows event key in_windows_eventlog2: remove unexpected spaces in parsing description Oct 22, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Extra Colon Parsed in JSON for EventID 4697 when downcase_description_keys = false

1 participant