Event/init-bare: Add add_missing_remote_network_timestamp logic

Make defaulting to the local network timestamp for remote events opt-in.
This commit is contained in:
Arne Welzel 2025-05-26 16:56:32 +02:00
parent b87109fcf1
commit 96f2d5d369
5 changed files with 54 additions and 15 deletions

View file

@ -19,6 +19,11 @@ redef exit_only_after_terminate = T;
redef allow_network_time_forward = F;
redef EventMetadata::add_network_timestamp = T;
# This is needed so that the receiving node sets its
# own local network timestamp on remote events that do
# not have network timestamp metadata.
redef EventMetadata::add_missing_remote_network_timestamp = T;
event zeek_init()
{
Broker::subscribe(getenv("TOPIC"));