Implement the zeek_init handler.

Implements the change and a test.
This commit is contained in:
Seth Hall 2019-04-12 22:29:40 +02:00
parent f96bc81f85
commit 8cefb9be42
118 changed files with 229 additions and 165 deletions

View file

@ -16,7 +16,7 @@ redef have_full_data = F;
@endif
@if ( Cluster::local_node_type() == Cluster::MANAGER )
event bro_init()
event zeek_init()
{
Broker::auto_publish(Cluster::worker_topic, remove_indicator);
}
@ -67,7 +67,7 @@ event Intel::match_remote(s: Seen) &priority=5
@endif
@if ( Cluster::local_node_type() == Cluster::WORKER )
event bro_init()
event zeek_init()
{
Broker::auto_publish(Cluster::manager_topic, match_remote);
Broker::auto_publish(Cluster::manager_topic, remove_item);

View file

@ -27,7 +27,7 @@ event Intel::read_entry(desc: Input::EventDescription, tpe: Input::Event, item:
Intel::insert(item);
}
event bro_init() &priority=5
event zeek_init() &priority=5
{
if ( ! Cluster::is_enabled() ||
Cluster::local_node_type() == Cluster::MANAGER )

View file

@ -223,7 +223,7 @@ type MinDataStore: record {
global min_data_store: MinDataStore &redef;
event bro_init() &priority=5
event zeek_init() &priority=5
{
Log::create_stream(LOG, [$columns=Info, $ev=log_intel, $path="intel"]);
}