Skip to content

Commit e39d467

Browse files
committed
Handle win 2025 encoding
1 parent 8054fef commit e39d467

File tree

1 file changed

+10
-2
lines changed

1 file changed

+10
-2
lines changed

winlogbeat/tests/system/test_wineventlog.py

+10-2
Original file line numberDiff line numberDiff line change
@@ -457,6 +457,7 @@ def test_multiline_events(self):
457457
"""
458458
wineventlog - Event with newlines and control characters
459459
"""
460+
460461
msg = """
461462
A trusted logon process has been registered with the Local Security Authority.
462463
This logon process will be trusted to submit logon requests.
@@ -469,9 +470,16 @@ def test_multiline_events(self):
469470
Logon ID: 0x3e7
470471
Logon Process Name: IKE"""
471472
self.write_event_log(msg)
472-
evts = self.read_events()
473+
evts = self.read_events(config={
474+
"event_logs": [
475+
{
476+
"name": self.providerName,
477+
"api": "wineventlog-experimental"
478+
}
479+
]
480+
}, expected_events=1)
473481
self.assertTrue(len(evts), 1)
474-
self.assertEqual(str(self.api), evts[0]["winlog.api"], msg=evts[0])
482+
self.assertEqual("wineventlog-experimental", evts[0]["winlog.api"], msg=evts[0])
475483
self.assertNotIn("event.original", evts[0], msg=evts[0])
476484
self.assertIn("message", evts[0], msg=evts[0])
477485
self.assertNotIn("\\u000a", evts[0]["message"], msg=evts[0])

0 commit comments

Comments
 (0)