Skip to content

Commit

Permalink
Fallback to LevelRaw if Level is not in the RenderingInfo of the XML …
Browse files Browse the repository at this point in the history
…event (elastic#4257)

If the Level is not in the RenderingInfo section of the event, fallback on the raw level. Applies to Windows Vista and above only.

https://discuss.elastic.co/t/event-fields-missing-if-renderinginfo-is-empty/84709

(cherry picked from commit c18adce)
  • Loading branch information
LucasArona authored and andrewkroh committed Jul 19, 2017
1 parent b7a6778 commit 9d014de
Showing 1 changed file with 1 addition and 0 deletions.
1 change: 1 addition & 0 deletions CHANGELOG.asciidoc
Original file line number Diff line number Diff line change
Expand Up @@ -81,6 +81,7 @@ https://github.com/elastic/beats/compare/v5.4.1...master[Check the HEAD diff]
*Packetbeat*

*Winlogbeat*
- Add the ability to use LevelRaw if Level isn't populated in the event XML. {pull}4257[4257]

==== Deprecated

Expand Down

0 comments on commit 9d014de

Please sign in to comment.