mirror of
https://github.com/zeek/zeek.git
synced 2025-10-11 19:18:19 +00:00

with the same userinterface as in the logging interface. Not really tested, but tests still work.
11 lines
275 B
Text
11 lines
275 B
Text
[source=wc -l ../input.log |, reader=Input::READER_RAW, mode=Input::MANUAL, name=input, fields=<no value description>, want_record=F, ev=line
|
|
{
|
|
print outfile, description;
|
|
print outfile, tpe;
|
|
print outfile, s;
|
|
close(outfile);
|
|
}, config={
|
|
|
|
}]
|
|
Input::EVENT_NEW
|
|
8 ../input.log
|