Arne Welzel 93813a5079 logging/ascii/json: Make TS_MILLIS signed, add TS_MILLIS_UNSIGNED ... It seems TS_MILLIS is specifically for Elasticsearch and starting with Elasticsearch 8.2 epoch_millis does (again?) support negative epoch_millis, so make Zeek produce that by default. If this breaks a given deployment, they can switch Zeek back to TS_MILLIS_UNSIGNED. https://discuss.elastic.co/t/migration-from-es-6-8-to-7-17-issues-with-negative-date-epoch-timestamp/335259 https://github.com/elastic/elasticsearch/pull/80208 Thanks for @timo-mue for reporting! Closes #4494		2025-05-30 17:23:29 +02:00
..
base	logging/ascii/json: Make TS_MILLIS signed, add TS_MILLIS_UNSIGNED	2025-05-30 17:23:29 +02:00
policy	btest/policy: Use generic cluster-layout.zeek	2025-05-20 20:30:01 +02:00
site	Start of 8.0.0 development	2025-04-25 11:59:08 -07:00
check-test-all-policy.zeek	GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev.	2019-05-01 21:43:45 +00:00