mirror of
https://github.com/zeek/zeek.git
synced 2025-10-05 08:08:19 +00:00
43 lines
1.3 KiB
C++
43 lines
1.3 KiB
C++
// See the file "COPYING" in the main distribution directory for copyright.
|
|
|
|
#pragma once
|
|
|
|
#include <string>
|
|
|
|
#include "zeek/threading/Formatter.h"
|
|
|
|
namespace zeek::json::detail {
|
|
class NullDoubleWriter;
|
|
}
|
|
|
|
namespace zeek::threading::formatter {
|
|
|
|
/**
|
|
* A thread-safe class for converting values into a JSON representation
|
|
* and vice versa.
|
|
*/
|
|
class JSON : public Formatter {
|
|
public:
|
|
enum TimeFormat {
|
|
TS_EPOCH, // Doubles that represents seconds from the UNIX epoch.
|
|
TS_ISO8601, // ISO 8601 defined human readable timestamp format.
|
|
TS_MILLIS // Milliseconds from the UNIX epoch. Some consumers need this (e.g.,
|
|
// elasticsearch).
|
|
};
|
|
|
|
JSON(MsgThread* t, TimeFormat tf, bool include_unset_fields = false);
|
|
~JSON() override = default;
|
|
|
|
bool Describe(ODesc* desc, Value* val, const std::string& name = "") const override;
|
|
bool Describe(ODesc* desc, int num_fields, const Field* const* fields, Value** vals) const override;
|
|
Value* ParseValue(const std::string& s, const std::string& name, TypeTag type,
|
|
TypeTag subtype = TYPE_ERROR) const override;
|
|
|
|
private:
|
|
void BuildJSON(zeek::json::detail::NullDoubleWriter& writer, Value* val, const std::string& name = "") const;
|
|
|
|
TimeFormat timestamps;
|
|
bool include_unset_fields;
|
|
};
|
|
|
|
} // namespace zeek::threading::formatter
|