zeek test
<unknown id>
<unknown id>
<unknown id>
event()