mirror of
https://github.com/zeek/zeek.git
synced 2025-10-06 16:48:19 +00:00
bb4b68946f
This one would fail intermittently in the cases where log files were opened or closed on a different second of the time of day from each other since the "out" baseline contains only a single "#open" and "#close" tag (indicating all logs opened/closed on same second of time of day). Piping aggregated log output through the timestamp canonifier before `uniq` makes it so "#open" and "#close" tags for different seconds of the time of day are reduced to a single one. |
||
|---|---|---|
| .. | ||
| cluster | ||
| communication | ||
| control | ||
| input | ||
| intel | ||
| logging | ||
| metrics | ||
| notice | ||
| packet-filter | ||
| reporter | ||
| software | ||