Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 06:38:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Merge remote-tracking branch 'origin/topic/awelzel/4177-4178-custom-event-metadata-part-1'

Browse source 
* origin/topic/awelzel/4177-4178-custom-event-metadata-part-1:
  Event: Move meta after args
  Event: Use IntrusivePtr to manage obj refcount
  btest/zam: Update for new EventMetadata bifs
  broker and cluster: Switch to new Enqueue() API
  Event/zeek.bif: Add EventMetadata current() and current_values() accessors
  Event: Deprecate default network timestamp metadata
  Event: Store timestamp in metadata vector
  EventRegistry/zeek.bif/init-bare: Add event metadata infrastructure
  EventMgr: Add CurrentEvent() accessor
This commit is contained in:
Arne Welzel 2025-05-23 20:57:54 +02:00
commit d929392a76
37 changed files with 656 additions and 28 deletions
Download patch file Download diff file Expand all files Collapse all files

11
CHANGES
View file

@ -1,3 +1,14 @@
8.0.0-dev.201 | 2025-05-23 20:57:54 +0200
* Add generic event metadata, part 1 (Arne Welzel, Corelight)
The ``ts`` member of ``Event`` was removed in favor of a more generic
approach that can hold any event metadata. Further, the Zeek script-layer
API for registering event metadata types was added.
Event instances do not network timestamp metadata by default anymore.
This feature can be re-enabled via EventMetadata::add_network_timestamp=T.
8.0.0-dev.191 | 2025-05-23 08:32:00 -0700
* Remove FindClangTidy.cmake, update cmake submodule (Tim Wojtulewicz, Corelight)