fix(userspace/engine): make sure exception fields are not optional in replace mode

Signed-off-by: Jason Dellaluce <jasondellaluce@gmail.com>
This commit is contained in:
Jason Dellaluce 2024-02-22 14:38:54 +00:00 committed by poiana
parent 1bf6a83e31
commit e211e97e2a

View File

@ -650,7 +650,7 @@ void rule_loader::reader::read_item(
if (check_update_expected(expected_keys, override_replace, "replace", "exceptions", ctx))
{
read_rule_exceptions(cfg, item, v.exceptions, ctx, true);
read_rule_exceptions(cfg, item, v.exceptions, ctx, false);
}
if (check_update_expected(expected_keys, override_replace, "replace", "output", ctx))
@ -771,7 +771,7 @@ void rule_loader::reader::read_item(
decode_optional_val(item, "warn_evttypes", v.warn_evttypes, ctx);
decode_optional_val(item, "skip-if-unknown-filter", v.skip_if_unknown_filter, ctx);
decode_tags(item, v.tags, ctx);
read_rule_exceptions(cfg, item, v.exceptions, ctx, has_append_flag);
read_rule_exceptions(cfg, item, v.exceptions, ctx, false);
collector.define(cfg, v);
}
}