Merge remote-tracking branch 'origin/topic/seth/zeek_init'

* origin/topic/seth/zeek_init:
  Some more testing fixes.
  Update docs and tests for bro_(init|done) -> zeek_(init|done)
  Implement the zeek_init handler.
This commit is contained in:
Jon Siwek 2019-04-19 11:16:35 -07:00
commit a994be9eeb
628 changed files with 868 additions and 1082 deletions

View file

@ -21,7 +21,7 @@ redef Log::default_rotation_interval = 0secs;
global n = 0;
event bro_init() &priority=5
event zeek_init() &priority=5
{
local r1: SumStats::Reducer = [$stream="test", $apply=set(SumStats::SUM, SumStats::MIN, SumStats::MAX, SumStats::AVERAGE, SumStats::STD_DEV, SumStats::VARIANCE, SumStats::UNIQUE, SumStats::HLL_UNIQUE)];
SumStats::create([$name="test",
@ -71,7 +71,7 @@ event ready_for_data()
@if ( Cluster::local_node_type() == Cluster::MANAGER )
event bro_init() &priority=100
event zeek_init() &priority=100
{
Broker::auto_publish(Cluster::worker_topic, ready_for_data);
}

View file

@ -4,7 +4,7 @@
redef exit_only_after_terminate=T;
event bro_init() &priority=5
event zeek_init() &priority=5
{
local r1: SumStats::Reducer = [$stream="test.metric",
$apply=set(SumStats::SUM,

View file

@ -18,7 +18,7 @@ redef Cluster::nodes = {
redef Log::default_rotation_interval = 0secs;
event bro_init() &priority=5
event zeek_init() &priority=5
{
local r1: SumStats::Reducer = [$stream="test.metric", $apply=set(SumStats::SUM)];
SumStats::create([$name="test",

View file

@ -27,7 +27,7 @@ event do_observe()
schedule 0.1secs { do_observe() };
}
event bro_init()
event zeek_init()
{
local r1 = SumStats::Reducer($stream="test",
$apply=set(SumStats::LAST),

View file

@ -22,7 +22,7 @@ redef Log::default_rotation_interval = 0secs;
global n = 0;
event bro_init() &priority=5
event zeek_init() &priority=5
{
local r1 = SumStats::Reducer($stream="test", $apply=set(SumStats::SUM, SumStats::MIN, SumStats::MAX, SumStats::AVERAGE, SumStats::STD_DEV, SumStats::VARIANCE, SumStats::UNIQUE));
SumStats::create([$name="test sumstat",
@ -37,7 +37,7 @@ event Broker::peer_lost(endpoint: Broker::EndpointInfo, msg: string)
global ready_for_data: event();
event bro_init()
event zeek_init()
{
Broker::auto_publish(Cluster::worker_topic, ready_for_data);
}

View file

@ -28,7 +28,7 @@ event on_demand_key()
}
}
event bro_init() &priority=5
event zeek_init() &priority=5
{
local r1: SumStats::Reducer = [$stream="test.reducer",
$apply=set(SumStats::SUM)];

View file

@ -18,7 +18,7 @@ redef Cluster::nodes = {
redef Log::default_rotation_interval = 0secs;
event bro_init() &priority=5
event zeek_init() &priority=5
{
local r1: SumStats::Reducer = [$stream="test", $apply=set(SumStats::SAMPLE), $num_samples=5];
SumStats::create([$name="test",
@ -47,7 +47,7 @@ event Broker::peer_lost(endpoint: Broker::EndpointInfo, msg: string)
global ready_for_data: event();
event bro_init()
event zeek_init()
{
Broker::auto_publish(Cluster::worker_topic, ready_for_data);

View file

@ -1,7 +1,7 @@
# @TEST-EXEC: bro %INPUT
# @TEST-EXEC: btest-diff .stdout
event bro_init() &priority=5
event zeek_init() &priority=5
{
local r1: SumStats::Reducer = [$stream="test.metric",
$apply=set(SumStats::SAMPLE), $num_samples=2];

View file

@ -5,7 +5,7 @@ redef enum Notice::Type += {
Test_Notice,
};
event bro_init() &priority=5
event zeek_init() &priority=5
{
local r1: SumStats::Reducer = [$stream="test.metric", $apply=set(SumStats::SUM)];
SumStats::create([$name="test1",

View file

@ -20,7 +20,7 @@ redef Cluster::nodes = {
redef Log::default_rotation_interval = 0secs;
event bro_init() &priority=5
event zeek_init() &priority=5
{
local r1: SumStats::Reducer = [$stream="test.metric",
$apply=set(SumStats::TOPK)];
@ -53,7 +53,7 @@ event Broker::peer_lost(endpoint: Broker::EndpointInfo, msg: string)
global ready_for_data: event();
event bro_init()
event zeek_init()
{
Broker::auto_publish(Cluster::worker_topic, ready_for_data);
}

View file

@ -1,7 +1,7 @@
# @TEST-EXEC: bro %INPUT
# @TEST-EXEC: btest-diff .stdout
event bro_init() &priority=5
event zeek_init() &priority=5
{
local r1: SumStats::Reducer = [$stream="test.metric",
$apply=set(SumStats::TOPK)];