mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 14:48:21 +00:00
630c256a72
* origin/topic/gilbert/ascii-header: Updated tests; removed net type from type conversion code. Updated header format (see #558) Header modification to LogWriterAscii to make it easier for scripts to understand bro log files. Notes: - I've refactored the code a bit, also adapting the style a bit. Also edited the header format slightly. - I'm skipping the testing/btest/profiles directory, which seems unrelated. - I'm also skipping the baseline updates as they weren't up-to-date anymore. Will update them in a subsequent commit.
44 lines
1.4 KiB
Text
44 lines
1.4 KiB
Text
##! Interface for the ascii log writer.
|
|
|
|
module LogAscii;
|
|
|
|
export {
|
|
## If true, output everything to stdout rather than
|
|
## into files. This is primarily for debugging purposes.
|
|
const output_to_stdout = F &redef;
|
|
|
|
## If true, include a header line with column names.
|
|
const include_header = T &redef;
|
|
|
|
## Prefix for the header line if included.
|
|
const header_prefix = "#" &redef;
|
|
|
|
## Separator between fields.
|
|
const separator = "\t" &redef;
|
|
|
|
## Separator between set elements.
|
|
const set_separator = "," &redef;
|
|
|
|
## String to use for empty fields.
|
|
const empty_field = "-" &redef;
|
|
|
|
## String to use for an unset &optional field.
|
|
const unset_field = "-" &redef;
|
|
}
|
|
|
|
# Default function to postprocess a rotated ASCII log file. It moves the rotated
|
|
# file to a new name that includes a timestamp with the opening time, and then
|
|
# runs the writer's default postprocessor command on it.
|
|
function default_rotation_postprocessor_func(info: Log::RotationInfo) : bool
|
|
{
|
|
# Move file to name including both opening and closing time.
|
|
local dst = fmt("%s.%s.log", info$path,
|
|
strftime(Log::default_rotation_date_format, info$open));
|
|
|
|
system(fmt("/bin/mv %s %s", info$fname, dst));
|
|
|
|
# Run default postprocessor.
|
|
return Log::run_rotation_postprocessor_cmd(info, dst);
|
|
}
|
|
|
|
redef Log::default_rotation_postprocessors += { [Log::WRITER_ASCII] = default_rotation_postprocessor_func };
|