From 64ce94a349dba8bcc46732447a5c33f590b735fc Mon Sep 17 00:00:00 2001
From: fukusuket <41001169+fukusuket@users.noreply.github.com>
Date: Sun, 12 Nov 2023 22:17:35 +0900
Subject: [PATCH] fix: added initial value when there is no Data field

---
 src/detections/message.rs | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/detections/message.rs b/src/detections/message.rs
index 50d338a8b..3dadb7a0c 100644
--- a/src/detections/message.rs
+++ b/src/detections/message.rs
@@ -321,7 +321,7 @@ pub fn parse_message(
         if suffix >= 1 {
             tmp_event_record = tmp_event_record
                 .get("Data")
-                .unwrap()
+                .unwrap_or(tmp_event_record)
                 .get((suffix - 1) as usize)
                 .unwrap_or(tmp_event_record);
         }