Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix event formatting with missing params (#6234) #6237

Closed
wants to merge 1 commit into from

Conversation

adriansr
Copy link
Contributor

@adriansr adriansr commented Jan 31, 2018

There was a crash in the eventlogging module used in legacy Windows versions (XP and 2003 server). It is necessary to account for the case where an event contains fewer parameters than required by its format string.

This patch also opportunistically adds the ability to lookup event descriptions in the system message table, as a last resort when a message can't be found in the message files specified in the registry. (feature removed for now)

Closes #6234

@adriansr adriansr changed the title Winlogbeat: Fix event formatting with missing params (#6234) Fix event formatting with missing params (#6234) Jan 31, 2018
@adriansr adriansr added in progress Pull request is currently in progress. review Winlogbeat bug and removed review labels Jan 31, 2018
There was a crash in the eventlogging module used in legacy Windows
versions (XP and 2003 server). It is necessary to account for the case
where an event contains fewer parameters than required by its format
string.

Closes elastic#6234
@adriansr adriansr added review in progress Pull request is currently in progress. and removed in progress Pull request is currently in progress. Winlogbeat bug review labels Jan 31, 2018
@adriansr adriansr closed this Jan 31, 2018
@adriansr
Copy link
Contributor Author

Closed as now we have a better fix for this

@andrewkroh
Copy link
Member

The new PR for this is #6247.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants