Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-09 01:58:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Add LogAscii::json_include_unset_fields flag to control unset field rendering

Browse source 
The flag controls whether JSON rendering includes unset &optional log fields
(F, the default), or includes them with a null value (T).
This commit is contained in:
Christian Kreibich 2021-12-06 17:49:25 -08:00
parent 7a6501296b
commit 1aaed1cc2e
9 changed files with 62 additions and 12 deletions
Download patch file Download diff file Expand all files Collapse all files

3
src/threading/formatters/JSON.h
View file

@ -26,7 +26,7 @@ public:
// elasticsearch).
};
JSON(MsgThread* t, TimeFormat tf);
JSON(MsgThread* t, TimeFormat tf, bool include_unset_fields = false);
~JSON() override;
bool Describe(ODesc* desc, Value* val, const std::string& name = "") const override;
@ -50,6 +50,7 @@ private:
TimeFormat timestamps;
bool surrounding_braces;
bool include_unset_fields;
};
} // namespace zeek::threading::formatter