mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 14:48:21 +00:00
14 lines
293 B
Text
14 lines
293 B
Text
##! This script enables expiration for intelligence items.
|
|
|
|
@load base/frameworks/intel
|
|
|
|
module Intel;
|
|
|
|
redef Intel::item_expiration = 10min;
|
|
|
|
hook item_expired(indicator: string, indicator_type: Type,
|
|
metas: set[MetaData]) &priority=-10
|
|
{
|
|
# Trigger removal of the expired item.
|
|
break;
|
|
}
|