Skip to content

Commit

Permalink
Fixed typo
Browse files Browse the repository at this point in the history
  • Loading branch information
sbylica-splunk committed Jan 22, 2025
1 parent e8aef4a commit 6a102ba
Showing 1 changed file with 4 additions and 4 deletions.
8 changes: 4 additions & 4 deletions package/etc/pylib/parser_leef.py
Original file line number Diff line number Diff line change
Expand Up @@ -25,7 +25,7 @@ def parse_message_from_pair(self, pair, log_message):
else:
log_message[".leef." + f] = v

def parse_v1(self, log_message, structure, pairs, separator):
def parse_v1(self, log_message, event, structure, pairs, separator):
separator = "\t"
pairs = event.split(separator)
if len(pairs) < 4:
Expand All @@ -34,7 +34,7 @@ def parse_v1(self, log_message, structure, pairs, separator):
event = "\t".join(pairs)
log_message[".leef.event"] = event

def parse_v2(self, event, pairs, structure, separator):
def parse_v2(self, event, structure, pairs, separator):
# V2 messages should always provide the sep but some fail do comply
# with the format spec if they don't assume tab
if len(structure) == 6 or not structure[5]:
Expand Down Expand Up @@ -69,10 +69,10 @@ def parse(self, log_message):
# V1 will always use tab
if structure[0][5:].startswith("1"):
lv = "1"
self.parse_v1(log_message, structure, pairs, separator)
self.parse_v1(log_message, event, structure, pairs, separator)
else:
lv = "2"
self.parse_v2(event, pairs, structure, separator)
self.parse_v2(event, structure, pairs, separator)

if separator.startswith("x"):
hex_sep = f"0{separator.lower()}"
Expand Down

0 comments on commit 6a102ba

Please sign in to comment.