fix(main): fixed time fmt parse error to regular json input file #1083

Yamato-Security · May 16, 2024 · cf4027d · cf4027d
1 parent 5a4290b
commit cf4027d
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/src/main.rs b/src/main.rs
@@ -1822,7 +1822,7 @@ impl App {
  &target_timestamp
  .to_string()
  .replace("\\\"", "")
- .replace('"', ""),
+ .replace(['"', '\''], ""),
  time_fmt,
  ) {
  Ok(without_timezone_datetime) => Some(DateTime::<Utc>::from_naive_utc_and_offset(
@@ -1993,7 +1993,7 @@ impl App {
  target_event_ids,
  stored_static,
  ),
- (false, true),
+ (is_splunk_json, is_splunk_api_json),
  &splunk_api_record,
  ) {
  records_per_detect.push((splunk_api_record.to_owned(), false));
@@ -2050,7 +2050,7 @@ impl App {
  target_event_ids,
  stored_static,
  ),
- (true, false),
+ (is_splunk_json, is_splunk_api_json),
  &data,
  ) {
  records_per_detect.push((data.to_owned(), false));