From 7dac7473655d84e134963867e2f38039a948c5e5 Mon Sep 17 00:00:00 2001 From: Eric Fontana Date: Fri, 8 Aug 2014 07:35:58 -0400 Subject: [PATCH] Fixed doc typo --- TimberWinR/mdocs/WindowsEvents.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/TimberWinR/mdocs/WindowsEvents.md b/TimberWinR/mdocs/WindowsEvents.md index ed775b3..be9164a 100644 --- a/TimberWinR/mdocs/WindowsEvents.md +++ b/TimberWinR/mdocs/WindowsEvents.md @@ -12,7 +12,7 @@ The following parameters are allowed when configuring WindowsEvents. | *source* | string |Windows event logs | Application,System,Security | System | | *binaryFormat* | string |Format of the "Data" binary field. | ASC,HEX,PRINT | **ASC** | | *msgErrorMode* | string |Behavior when event messages or event category names cannot be resolved. |NULL,ERROR,MSG | **MSG** | -| *direction* | string |Format of the "Data" binary field. | FW,BW | **FW** | +| *direction* | string |Direction to scan the event logs | FW,BW | **FW** | | *stringsSep* | string |Separator between values of the "Strings" field. | any string | vertical bar | | *fullEventCode* | bool |Return the full event ID code instead of the friendly code. | true,false | **false** | | *fullText* | bool |Retrieve the full text message | true,false | **true** |