Skip to content

Timestamps were not returned #12

@mavroudo

Description

@mavroudo

Even though the detection runs correctly when time information is required, the time info were not returned. The issue exists in the transformation of eventBoth to SaseEvent and back.

Specifically, the variable isTimestampSet was used to determine if the timestamp was set (and if that is the case it will short the events based on their timestamp). The issue with that is that we want to add the time information but still sort based o the position (which is always available).

Solution: add an extrafield -> SortByTimestamp and separate the logic between these two.

I am opening this issue to it after the attributes has been implemented and not cause any more problems

Metadata

Metadata

Labels

No labels
No labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions