Fix a bug in the feature_extraction analyzer - Githubissues

google / timesketch

Collaborative forensic timeline analysis

Apache License 2.0

2.52k stars 577 forks source link

Fix a bug in the feature_extraction analyzer #3047

Closed jkppr closed 3 months ago

jkppr commented 3 months ago

This PR fixes the bug #3046 by removing the options and handling of create_view and aggregate from the analyzer.

aggregate was not supported anyway and can be introduced again in the future when our re-work of the aggregation feature is merged.
create_view was supported but resulted in a crash due to the restructure of the feature extractions analyzer into a plugin approach. However, a very similar result is achieved by using the tags option instead.

closes #3046