Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-16 05:28:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

No quotes for times and doubles, since ES won't interpret them as numbers then.

Browse source
This commit is contained in:
Vlad Grigorescu 2012-06-05 23:01:36 -04:00
parent a3b330dbc6
commit 894dec0069
1 changed files with 2 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
src/logging/writers/ElasticSearch.cc
View file

@ -115,9 +115,9 @@ char* ElasticSearch::FieldToString(Value* val, const Field* field)
case TYPE_INTERVAL:
case TYPE_TIME:
sprintf(result, "\"%llu\"", (unsigned long long) (val->val.double_val * 1000)); return result;
sprintf(result, "%llu", (unsigned long long) (val->val.double_val * 1000)); return result;
case TYPE_DOUBLE:
sprintf(result, "\"%s\"", Render(val->val.double_val).c_str()); return result;
sprintf(result, "%s", Render(val->val.double_val).c_str()); return result;
case TYPE_ENUM:
case TYPE_STRING: