forked from mavroudo/SequenceDetectionQueryExecutor
-
Notifications
You must be signed in to change notification settings - Fork 2
Timestamps were not returned #12
Copy link
Copy link
Open
Description
Even though the detection runs correctly when time information is required, the time info were not returned. The issue exists in the transformation of eventBoth to SaseEvent and back.
Specifically, the variable isTimestampSet was used to determine if the timestamp was set (and if that is the case it will short the events based on their timestamp). The issue with that is that we want to add the time information but still sort based o the position (which is always available).
Solution: add an extrafield -> SortByTimestamp and separate the logic between these two.
I am opening this issue to it after the attributes has been implemented and not cause any more problems
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
No labels