zeek/testing/btest/scripts/base/frameworks/logging/field-extension-complex.zeek
Robin Sommer 789cb376fd GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev.
This also installs symlinks from "zeek" and "bro-config" to a wrapper
script that prints a deprecation warning.

The btests pass, but this is still WIP. broctl renaming is still
missing.

#239
2019-05-01 21:43:45 +00:00

37 lines
841 B
Text

# @TEST-EXEC: zeek -b -r $TRACES/wikipedia.trace %INPUT
# @TEST-EXEC: btest-diff conn.log
@load base/protocols/conn
type InnerRecord: record {
a: count;
b: count;
c: count;
};
type InnerLoggedRecord: record {
a: count &log;
b: count;
c: count &log;
d: set[count] &log;
};
type Extension: record {
write_ts: time &log;
stream: string &log;
inner: InnerRecord;
innerLogged: InnerLoggedRecord &log;
system_name: string &log;
};
function add_extension(path: string): Extension
{
return Extension($write_ts = network_time(),
$stream = path,
$system_name = peer_description,
$inner = InnerRecord($a=1,$b=2,$c=3),
$innerLogged = InnerLoggedRecord($a=1,$b=2,$c=3,$d=set(1,2,3,4))
);
}
redef Log::default_ext_func = add_extension;