mirror of
https://github.com/zeek/zeek.git
synced 2025-10-10 02:28:21 +00:00
7ff2a3e115
This required adding the ability for RecordVal::CoerceTo functions to optionally allow orphaning fields. The default is to not allow it, but now before writing to a log, the value of the stream's columns is coerced down, if necessary, before passing it on to the filter's path_func. Addresses #600.
34 lines
1.1 KiB
Text
34 lines
1.1 KiB
Text
#separator \x09
|
|
#path local
|
|
#fields ts id.orig_h
|
|
#types time addr
|
|
1300475168.652003 141.142.220.118
|
|
1300475168.724007 141.142.220.118
|
|
1300475168.859163 141.142.220.118
|
|
1300475168.902635 141.142.220.118
|
|
1300475168.892936 141.142.220.118
|
|
1300475168.892913 141.142.220.118
|
|
1300475168.855305 141.142.220.118
|
|
1300475168.855330 141.142.220.118
|
|
1300475168.895267 141.142.220.118
|
|
1300475168.853899 141.142.220.118
|
|
1300475168.893988 141.142.220.118
|
|
1300475168.894787 141.142.220.118
|
|
1300475173.117362 141.142.220.226
|
|
1300475173.153679 141.142.220.238
|
|
1300475168.857956 141.142.220.118
|
|
1300475168.854378 141.142.220.118
|
|
1300475168.854837 141.142.220.118
|
|
1300475167.099816 141.142.220.50
|
|
1300475168.891644 141.142.220.118
|
|
1300475168.892037 141.142.220.118
|
|
1300475171.677081 141.142.220.226
|
|
1300475168.894422 141.142.220.118
|
|
1300475167.096535 141.142.220.202
|
|
1300475168.858713 141.142.220.118
|
|
1300475168.902195 141.142.220.118
|
|
1300475169.899438 141.142.220.44
|
|
1300475168.892414 141.142.220.118
|
|
1300475168.858306 141.142.220.118
|
|
1300475168.901749 141.142.220.118
|
|
1300475170.862384 141.142.220.226
|