Update telemetry log policy due to the fact that unit will not be filled in anymore

This commit is contained in:
Tim Wojtulewicz 2024-03-27 12:45:51 -07:00
parent 84aa308527
commit 017ee4509c
7 changed files with 51 additions and 42 deletions

View file

@ -28,7 +28,7 @@ hook Log::log_stream_policy(rec: any, id: Log::ID)
hook Telemetry::log_policy(rec: Telemetry::Info, id: Log::ID, filter: Log::Filter)
{
if ( rec$prefix != "zeek" || /^log-/ !in rec$name )
if ( rec$prefix != "zeek" || /^zeek_log_/ !in rec$name )
break;
if ( /HTTP|DNS|Conn/ !in cat(rec$label_values) )