Skip to content

Commit 5fd4344

Browse files
Onagerjoachimmetz
authored andcommitted
Changes to handle multiple presets #2321
1 parent 1c2942d commit 5fd4344

File tree

2 files changed

+5
-8
lines changed

2 files changed

+5
-8
lines changed

plaso/cli/extraction_tool.py

Lines changed: 4 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -115,14 +115,11 @@ def _CreateProcessingConfiguration(self, knowledge_base):
115115
if preset_definitions:
116116
preset_names = [
117117
preset_definition.name for preset_definition in preset_definitions]
118-
if len(preset_names) != 1:
119-
raise errors.BadConfigOption(
120-
'More than 1 parser preset found for: {0:s} namely: {1:s}'.format(
121-
operating_system, preset_names))
118+
filter_expression = ','.join(preset_names)
122119

123120
logger.info('Parser filter expression set to: {0:s}'.format(
124-
preset_names[0]))
125-
configuration.parser_filter_expression = preset_names[0]
121+
filter_expression))
122+
configuration.parser_filter_expression = filter_expression
126123

127124
return configuration
128125

@@ -148,7 +145,7 @@ def _ParsePerformanceOptions(self, options):
148145
self._buffer_size = int(self._buffer_size, 10)
149146
except ValueError:
150147
raise errors.BadConfigOption(
151-
'Invalid buffer size: {0:s}.'.format(self._buffer_size))
148+
'Invalid buffer size: {0!s}.'.format(self._buffer_size))
152149

153150
self._queue_size = self.ParseNumericOption(options, 'queue_size')
154151

plaso/parsers/presets.py

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@ class ParserPreset(object):
1414
1515
Attributes:
1616
name (str): name of the preset.
17-
operating_system (list[OperatingSystemArtifact]): operating system
17+
operating_systems (list[OperatingSystemArtifact]): operating system
1818
artifact attribute containers, that specify to which operating
1919
systems the preset applies.
2020
parsers (list[str]): names of parser and parser plugins.

0 commit comments

Comments
 (0)