From acd3c694a61ebe450969f45cf1e904b945b57425 Mon Sep 17 00:00:00 2001
From: Viktor Hrebeniuk <76157115+saltar-ua@users.noreply.github.com>
Date: Tue, 7 May 2024 13:51:25 +0300
Subject: [PATCH] Add escape to the alter parsing string
---
.../app/translator/platforms/palo_alto/renders/cortex_xsiam.py | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/uncoder-core/app/translator/platforms/palo_alto/renders/cortex_xsiam.py b/uncoder-core/app/translator/platforms/palo_alto/renders/cortex_xsiam.py
index 33f2d5cf..95dda5ac 100644
--- a/uncoder-core/app/translator/platforms/palo_alto/renders/cortex_xsiam.py
+++ b/uncoder-core/app/translator/platforms/palo_alto/renders/cortex_xsiam.py
@@ -98,7 +98,7 @@ class CortexXQLQueryRender(PlatformQueryRender):
mappings: CortexXSIAMMappings = cortex_xsiam_mappings
is_strict_mapping = True
raw_log_field_pattern = (
- '| alter {field} = regextract(to_json_string(action_evtlog_data_fields)->{field}{{}}, ""(.*)"")'
+ '| alter {field} = regextract(to_json_string(action_evtlog_data_fields)->{field}{{}}, "\\"(.*)\\"")'
)
or_token = "or"
pFad - Phonifier reborn
Pfad - The Proxy pFad of © 2024 Garber Painting. All rights reserved.
Note: This service is not intended for secure transactions such as banking, social media, email, or purchasing. Use at your own risk. We assume no liability whatsoever for broken pages.
Alternative Proxies:
Alternative Proxy
pFad Proxy
pFad v3 Proxy
pFad v4 Proxy