Re: printing stream columns
Jon Siwek <[email protected]> Fri, 1 Nov 2019 12:53:13 -0700
| Newsgroups | gmane.comp.security.detection.bro |
|---|---|
| Message-ID | <CAMzgZ0Kh_owe1Ze25BOYGbn2sstvhq6dcv=UW5gmXt41dW4o6A@mail.gmail.com> |
On Fri, Nov 1, 2019 at 4:11 AM Henri Dubois-Ferriere <[email protected]> wrote: > I'd like to be able to peek into nested records to get the inner fields that will show up in the logs. It doesn't seem like there's a way to do record introspection given a string representation of the record type name, but if I'd be delighted to be told I'm missing something. No, didn't look like there was a way to do that, but I've made a PR/patch that should make recursive introspection possible via something like `record_fields("conn_id")` for any arbitrary record type name: https://github.com/zeek/zeek/pull/675 - Jon _______________________________________________ Zeek mailing list [email protected] http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek