-
Notifications
You must be signed in to change notification settings - Fork 200
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Unescaped control character ^C
causing jq parsing errors
#1068
Comments
hitenkoku
added a commit
that referenced
this issue
Jun 4, 2023
hitenkoku
added a commit
that referenced
this issue
Jun 4, 2023
hitenkoku
added a commit
that referenced
this issue
Jun 4, 2023
Here is the list of control characters that need to be converted only when
I am not sure if this will cause other problems though when importing JSON into a SIEM, etc.. so we will have to see. |
hitenkoku
added a commit
that referenced
this issue
Jun 9, 2023
hitenkoku
added a commit
that referenced
this issue
Jun 9, 2023
hitenkoku
added a commit
that referenced
this issue
Jun 9, 2023
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
When there is a control character like
^C
in log data, it will causejq
to give the error:parse error: Invalid string: control characters from U+0000 through U+001F must be escaped at line 10898, column 24
.We may need to escape other control characters besides
^C
according to this chart: https://www.techonthenet.com/unicode/chart.php@hitenkoku Can you look at this? I will DM you the .evtx file that is causing this problem.
To reproduce:
The text was updated successfully, but these errors were encountered: