mirror of
https://github.com/zeek/zeek.git
synced 2025-10-12 03:28:19 +00:00
make want_record=T the default for events
This commit is contained in:
parent
63e8bf72ed
commit
76ea182387
7 changed files with 7 additions and 7 deletions
|
@ -84,7 +84,7 @@ export {
|
||||||
|
|
||||||
## If want_record if false (default), the event receives each value in fields as a seperate argument.
|
## If want_record if false (default), the event receives each value in fields as a seperate argument.
|
||||||
## If it is set to true, the event receives all fields in a signle record value.
|
## If it is set to true, the event receives all fields in a signle record value.
|
||||||
want_record: bool &default=F;
|
want_record: bool &default=T;
|
||||||
|
|
||||||
## The event that is rised each time a new line is received from the reader.
|
## The event that is rised each time a new line is received from the reader.
|
||||||
## The event will receive an Input::Event enum as the first element, and the fields as the following arguments.
|
## The event will receive an Input::Event enum as the first element, and the fields as the following arguments.
|
||||||
|
|
|
@ -51,6 +51,6 @@ event bro_init()
|
||||||
{
|
{
|
||||||
try = 0;
|
try = 0;
|
||||||
outfile = open("../out");
|
outfile = open("../out");
|
||||||
Input::add_event([$source="../input.log", $name="input", $fields=Val, $ev=line]);
|
Input::add_event([$source="../input.log", $name="input", $fields=Val, $ev=line, $want_record=F]);
|
||||||
Input::remove("input");
|
Input::remove("input");
|
||||||
}
|
}
|
||||||
|
|
|
@ -49,6 +49,6 @@ event bro_init()
|
||||||
{
|
{
|
||||||
try = 0;
|
try = 0;
|
||||||
outfile = open("../out");
|
outfile = open("../out");
|
||||||
Input::add_event([$source="../input.log", $name="input", $fields=Val, $ev=line]);
|
Input::add_event([$source="../input.log", $name="input", $fields=Val, $ev=line, $want_record=F]);
|
||||||
Input::remove("input");
|
Input::remove("input");
|
||||||
}
|
}
|
||||||
|
|
|
@ -37,6 +37,6 @@ event line(description: Input::EventDescription, tpe: Input::Event, s: string)
|
||||||
event bro_init()
|
event bro_init()
|
||||||
{
|
{
|
||||||
outfile = open("../out.tmp");
|
outfile = open("../out.tmp");
|
||||||
Input::add_event([$source="wc -l ../input.log |", $reader=Input::READER_RAW, $name="input", $fields=Val, $ev=line]);
|
Input::add_event([$source="wc -l ../input.log |", $reader=Input::READER_RAW, $name="input", $fields=Val, $ev=line, $want_record=F]);
|
||||||
Input::remove("input");
|
Input::remove("input");
|
||||||
}
|
}
|
||||||
|
|
|
@ -44,6 +44,6 @@ event bro_init()
|
||||||
{
|
{
|
||||||
try = 0;
|
try = 0;
|
||||||
outfile = open("../out");
|
outfile = open("../out");
|
||||||
Input::add_event([$source="../input.log", $reader=Input::READER_RAW, $mode=Input::STREAM, $name="input", $fields=Val, $ev=line]);
|
Input::add_event([$source="../input.log", $reader=Input::READER_RAW, $mode=Input::STREAM, $name="input", $fields=Val, $ev=line, $want_record=F]);
|
||||||
Input::remove("input");
|
Input::remove("input");
|
||||||
}
|
}
|
||||||
|
|
|
@ -44,7 +44,7 @@ event bro_init()
|
||||||
{
|
{
|
||||||
try = 0;
|
try = 0;
|
||||||
outfile = open("../out");
|
outfile = open("../out");
|
||||||
Input::add_event([$source="../input.log", $reader=Input::READER_RAW, $mode=Input::REREAD, $name="input", $fields=Val, $ev=line]);
|
Input::add_event([$source="../input.log", $reader=Input::READER_RAW, $mode=Input::REREAD, $name="input", $fields=Val, $ev=line, $want_record=F]);
|
||||||
Input::force_update("input");
|
Input::force_update("input");
|
||||||
Input::remove("input");
|
Input::remove("input");
|
||||||
}
|
}
|
||||||
|
|
|
@ -58,5 +58,5 @@ event bro_init()
|
||||||
{
|
{
|
||||||
outfile = open("../out");
|
outfile = open("../out");
|
||||||
try = 0;
|
try = 0;
|
||||||
Input::add_event([$source="../input.log", $reader=Input::READER_RAW, $mode=Input::STREAM, $name="input", $fields=Val, $ev=line]);
|
Input::add_event([$source="../input.log", $reader=Input::READER_RAW, $mode=Input::STREAM, $name="input", $fields=Val, $ev=line, $want_record=F]);
|
||||||
}
|
}
|
||||||
|
|
Loading…
Add table
Add a link
Reference in a new issue