Skip to content

Winlogbeat sysmon javascript error #22219

@adriansr

Description

@adriansr

For confirmed bugs, please report:

  • Version: 7.9.2
  • Operating System: Windows
  • Discuss Forum URL: n/a
  • Steps to Reproduce: n/a

The following error appears in Winlogbeat debug logs for some events:

2020-10-27T12:08:42.253Z        DEBUG   [processors]    processing/processors.go:112    Fail to apply processor client{script=[type=javascript, id=, sources=C:\Program files\winlogbeat/module/security/config/winlogbeat-security.js], condition=equals: map[winlog.channel:{0 Security false}], script=[type=javascript, id=, sources=C:\Program files\winlogbeat/module/sysmon/config/winlogbeat-sysmon.js], condition=equals: map[winlog.channel:{0 Microsoft-Windows-Sysmon/Operational false}], script=[type=javascript, id=, sources=C:\Program files\winlogbeat/module/powershell/config/winlogbeat-powershell.js], condition=equals: map[winlog.channel:{0 Windows PowerShell false}], script=[type=javascript, id=, sources=C:\Program files\winlogbeat/module/powershell/config/winlogbeat-powershell.js], condition=equals: map[winlog.channel:{0 Microsoft-Windows-PowerShell/Operational false}]}: failed in processor.javascript: failed in process function: TypeError: Cannot read property 'split' of undefined at C:\Program files\winlogbeat/module/sysmon/config/winlogbeat-sysmon.js:330:32(7)

failed in processor.javascript:
failed in process function:
TypeError: Cannot read property 'split' of undefined at C:\Program files\winlogbeat/module/sysmon/config/winlogbeat-sysmon.js:330:32(7)

Metadata

Metadata

Assignees

Type

No type
No fields configured for issues without a type.

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions