Merge remote-tracking branch 'origin/topic/seth/zeek_init'

* origin/topic/seth/zeek_init:
  Some more testing fixes.
  Update docs and tests for bro_(init|done) -> zeek_(init|done)
  Implement the zeek_init handler.
This commit is contained in:
Jon Siwek 2019-04-19 11:16:35 -07:00
commit a994be9eeb
628 changed files with 868 additions and 1082 deletions

View file

@ -61,7 +61,7 @@ hook Intel::item_expired(indicator: string, indicator_type: Intel::Type,
print fmt("Expired: %s", indicator);
}
event bro_init() &priority=-10
event zeek_init() &priority=-10
{
schedule 1.5sec { do_it() };
}

View file

@ -37,7 +37,7 @@ event Intel::log_intel(rec: Intel::Info)
terminate();
}
event bro_init() &priority=-10
event zeek_init() &priority=-10
{
schedule 1sec { do_it() };
}

View file

@ -32,7 +32,7 @@ event Intel::log_intel(rec: Intel::Info)
terminate();
}
event bro_init() &priority=-10
event zeek_init() &priority=-10
{
schedule 1sec { do_it() };
}

View file

@ -29,7 +29,7 @@ event do_it()
$where=SOMEWHERE]);
}
event bro_init() &priority=-10
event zeek_init() &priority=-10
{
schedule 1sec { do_it() };
}

View file

@ -45,7 +45,7 @@ event do_it()
Intel::seen([$indicator="e@mail.com", $indicator_type=Intel::EMAIL, $where=Intel::IN_A_TEST]);
}
event bro_init()
event zeek_init()
{
# Delay the workers searching for hits briefly to allow for the data distribution
# mechanism to distribute the data to the workers.

View file

@ -25,7 +25,7 @@ event do_it()
terminate();
}
event bro_init() &priority=-10
event zeek_init() &priority=-10
{
schedule 1sec { do_it() };
}