parameters: (name, field_name)
docstring: Maps a Sysmon event type to VAST type.
docstring_summary: Maps a Sysmon event type to VAST type.
docstring_tokens: Maps a Sysmon event type to VAST type .
function: def legacy_map_type(name, field_name):
      """Maps a Sysmon event type to VAST type."""
      if name == "string":
          return "string"
      elif name == "integer":
          if field_name == "SourcePort" or field_name == "DestinationPort":
              return "port"
          return "count"
      elif name == "date":
          return "timestamp"
      elif name == "boolean" or name == "bool":
          return "bool"
      elif name == "ip":
          return "addr"
      else:
          raise NotImplementedError(name)
function_tokens: def legacy_map_type ( name , field_name ) : if name == "string" : return "string" elif name == "integer" : if field_name == "SourcePort" or field_name == "DestinationPort" : return "port" return "count" elif name == "date" : return "timestamp" elif name == "boolean" or name == "bool" : return "bool" elif name == "ip" : return "addr" else : raise NotImplementedError ( name )