libyal / winevt-kb

Windows Event Log Knowledge Base
Apache License 2.0
16 stars 5 forks source link

handle duplicate event log providers #7

Closed joachimmetz closed 9 years ago

joachimmetz commented 9 years ago

Duplicate event log provides in portable message resource database currently causing issues.

SELECT * FROM event_log_providers WHERE log_source == 'Microsoft-Windows-Eventlog';
154|Microsoft-Windows-Eventlog|System|{fc65ddd8-d6ef-4962-83d5-6e5cfe9ce148}
378|Microsoft-Windows-Eventlog|Security|{fc65ddd8-d6ef-4962-83d5-6e5cfe9ce148}
joachimmetz commented 9 years ago

Export will no longer store the log type and will warn about duplicate event log providers with different values.