diff --git a/auditd-record.cpp b/auditd-record.cpp index f965782..535cfde 100644 --- a/auditd-record.cpp +++ b/auditd-record.cpp @@ -273,8 +273,8 @@ void IntegerRecordField::addOrUpdateValue(auparse_state_t *record) std::vector IntegerRecordField::generateColumnsAndNames() const { return std::vector { - Column { m_name + ".IntValue", std::make_shared(std::make_shared(), std::make_shared()) }, - Column { m_name + ".InterpretedValue", std::make_shared(std::make_shared(), std::make_shared()) } + Column { m_name + "_IntValue", std::make_shared(std::make_shared(), std::make_shared()) }, + Column { m_name + "_InterpretedValue", std::make_shared(std::make_shared(), std::make_shared()) } }; } @@ -344,8 +344,8 @@ void InterpretedStringArrayRecordField::addOrUpdateValue(auparse_state_t *record std::vector InterpretedStringArrayRecordField::generateColumnsAndNames() const { return std::vector { - Column { m_name + ".Name", std::make_shared(std::make_shared()) }, - Column { m_name + ".Value", std::make_shared(std::make_shared()) } + Column { m_name + "_Name", std::make_shared(std::make_shared()) }, + Column { m_name + "_Value", std::make_shared(std::make_shared()) } }; }