mirror of
https://github.com/zeek/zeek.git
synced 2025-10-10 18:48:20 +00:00
a6d87fcab7
more cases. It will now not only fire after table-reads have been completed, but also after the last event of a whole-file-read (or whole-db-read, etc.). The interface also has been extended a bit to allow readers to directly fire the event should they so choose. This allows the event to be fired in direct table-setting/event-sending modes, which was previously not possible.
85 lines
1.9 KiB
Text
85 lines
1.9 KiB
Text
[source=../input.log, reader=Input::READER_ASCII, mode=Input::MANUAL, name=input, fields=<no value description>, want_record=F, ev=line
|
|
{
|
|
print outfile, A::description;
|
|
print outfile, A::tpe;
|
|
print outfile, A::i;
|
|
print outfile, A::b;
|
|
}, config={
|
|
|
|
}]
|
|
Input::EVENT_NEW
|
|
1
|
|
T
|
|
[source=../input.log, reader=Input::READER_ASCII, mode=Input::MANUAL, name=input, fields=<no value description>, want_record=F, ev=line
|
|
{
|
|
print outfile, A::description;
|
|
print outfile, A::tpe;
|
|
print outfile, A::i;
|
|
print outfile, A::b;
|
|
}, config={
|
|
|
|
}]
|
|
Input::EVENT_NEW
|
|
2
|
|
T
|
|
[source=../input.log, reader=Input::READER_ASCII, mode=Input::MANUAL, name=input, fields=<no value description>, want_record=F, ev=line
|
|
{
|
|
print outfile, A::description;
|
|
print outfile, A::tpe;
|
|
print outfile, A::i;
|
|
print outfile, A::b;
|
|
}, config={
|
|
|
|
}]
|
|
Input::EVENT_NEW
|
|
3
|
|
F
|
|
[source=../input.log, reader=Input::READER_ASCII, mode=Input::MANUAL, name=input, fields=<no value description>, want_record=F, ev=line
|
|
{
|
|
print outfile, A::description;
|
|
print outfile, A::tpe;
|
|
print outfile, A::i;
|
|
print outfile, A::b;
|
|
}, config={
|
|
|
|
}]
|
|
Input::EVENT_NEW
|
|
4
|
|
F
|
|
[source=../input.log, reader=Input::READER_ASCII, mode=Input::MANUAL, name=input, fields=<no value description>, want_record=F, ev=line
|
|
{
|
|
print outfile, A::description;
|
|
print outfile, A::tpe;
|
|
print outfile, A::i;
|
|
print outfile, A::b;
|
|
}, config={
|
|
|
|
}]
|
|
Input::EVENT_NEW
|
|
5
|
|
F
|
|
[source=../input.log, reader=Input::READER_ASCII, mode=Input::MANUAL, name=input, fields=<no value description>, want_record=F, ev=line
|
|
{
|
|
print outfile, A::description;
|
|
print outfile, A::tpe;
|
|
print outfile, A::i;
|
|
print outfile, A::b;
|
|
}, config={
|
|
|
|
}]
|
|
Input::EVENT_NEW
|
|
6
|
|
F
|
|
[source=../input.log, reader=Input::READER_ASCII, mode=Input::MANUAL, name=input, fields=<no value description>, want_record=F, ev=line
|
|
{
|
|
print outfile, A::description;
|
|
print outfile, A::tpe;
|
|
print outfile, A::i;
|
|
print outfile, A::b;
|
|
}, config={
|
|
|
|
}]
|
|
Input::EVENT_NEW
|
|
7
|
|
T
|
|
End-of-data
|