eventlog with preprocessing loses extra fields

XMLWordPrintable

    • Sprint 90 (Jul 2022)
    • 1

      Configure  "eventlog[System,,,,,,skip]" key, add a "Discard unchanged with heartbeat" preprocessing.

      Observe how windows specific columns (Local time, Source, Severity) being lost and "Event ID" column is populated by zeroes.

      It happens because of the preprocessing rule, but it should not happen this way.
      See screenshots.

        1. Selection_1322.png
          Selection_1322.png
          20 kB
        2. Selection_1320.png
          Selection_1320.png
          37 kB
        3. image-2022-04-29-10-30-35-057.png
          image-2022-04-29-10-30-35-057.png
          19 kB

            Assignee:
            Vladislavs Sokurenko
            Reporter:
            Oleksii Zagorskyi
            Team A
            Votes:
            3 Vote for this issue
            Watchers:
            6 Start watching this issue

              Created:
              Updated:
              Resolved: