Fix counting error when sessions have one result.

counteractive · Dec 16, 2020 · 6f4b91e · 6f4b91e
1 parent 8abad80
commit 6f4b91e
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 1 deletion.
diff --git a/.gitignore b/.gitignore
@@ -1 +1,2 @@
 archive/
+tmp/
diff --git a/Get-UnifiedAuditLog.psm1 b/Get-UnifiedAuditLog.psm1
@@ -146,7 +146,10 @@ Submit issues, contribute, and view the license at https://github.com/counteract
         $intervalResultCount = $SESSION_SIZE_LIMIT
       }
 
-      $sessionResultCount = $sessionResultCount + $results.Count
+      $resultsCount = 1 # if there's only one result then $results is not an array (and thus won't have a .Count property) 
+      if ($results.Count) { $resultsCount = $results.Count }
+      $sessionResultCount = $sessionResultCount + $resultsCount
+
       Write-Verbose "    Retrieved $([math]::Max($sessionResultCount, 0)) of $intervalResultCount interval records"
 
       # The interesting stuff is in the AuditData field, which is a JSON string (!).