7 commits

Author	SHA1	Message	Date
Christian Kreibich	1bd658da8f	Support for log filter policy hooks ... This adds a "policy" hook into the logging framework's streams and filters to replace the existing log filter predicates. The hook signature is as follows: hook(rec: any, id: Log::ID, filter: Log::Filter); The logging manager invokes hooks on each log record. Hooks can veto log records via a break, and modify them if necessary. Log filters inherit the stream-level hook, but can override or remove the hook as needed. The distribution's existing log streams now come with pre-defined hooks that users can add handlers to. Their name is standardized as "log_policy" by convention, with additional suffixes when a module provides multiple streams. The following adds a handler to the Conn module's default log policy hook: hook Conn::log_policy(rec: Conn::Info, id: Log::ID, filter: Log::Filter) { if ( some_veto_reason(rec) ) break; } By default, this handler will get invoked for any log filter associated with the Conn::LOG stream. The existing predicates are deprecated for removal in 4.1 but continue to work.	2020-09-30 12:32:45 -07:00
Jon Siwek	ccdaf5f111	Merge branch 'stats-logging-fix' of https://github.com/brittanydonowho/zeek ... - Added test case and adjusted whitespace in merge * 'stats-logging-fix' of https://github.com/brittanydonowho/zeek: Fixed stats.zeek to log all data before zeek terminates rather than return too soon	2020-04-29 15:58:35 -07:00
Brittany Donowho	97c8912443	Fixed stats.zeek to log all data before zeek terminates rather than return too soon	2020-04-29 17:37:29 -04:00
Jon Siwek	dfed213f31	Deprecate functions with "bro" in them. ... * "bro_is_terminating" is now "zeek_is_terminating" * "bro_version" is now "zeek_version" The old function names still exist for now, but are deprecated.	2019-06-05 16:18:57 -07:00
Daniel Thayer	be182aac83	More bro-to-zeek renaming in scripts and other files	2019-05-16 02:36:41 -05:00
Jon Siwek	a994be9eeb	Merge remote-tracking branch 'origin/topic/seth/zeek_init' ... * origin/topic/seth/zeek_init: Some more testing fixes. Update docs and tests for bro_(init|done) -> zeek_(init|done) Implement the zeek_init handler.	2019-04-19 11:24:29 -07:00
Daniel Thayer	18bd74454b	Rename all scripts to have ".zeek" file extension	2019-04-11 21:12:40 -05:00

Renamed from scripts/policy/misc/stats.bro (Browse further)