Merge branch 'main' into feat/parse_more_openssh_events

HarishHary · May 29, 2024 · b016bfd · b016bfd
2 parents c2ff697 + d69f649
commit b016bfd
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/SekoiaIO/endpoint/ingest/parser.yml b/SekoiaIO/endpoint/ingest/parser.yml
@@ -8,7 +8,7 @@ pipeline:
         output_field: event
 
   - name: parsed_task_content_xml
-    filter: "{{json.event.action.properties.TaskContent != null and '<?xml' in json.event.action.properties.TaskContent}}"
+    filter: "{{json.event.action.properties.TaskContent != null and '<?xml' in json.event.action.properties.TaskContent and '</Task>' in json.event.action.properties.TaskContent}}"
     external:
       name: xml.parse-xml
       properties: