[Bro-Dev] #685: Change default constant for empty or unset field of LogWriterAscii
Bro Tracker
bro at tracker.bro-ids.org
Fri Nov 18 07:55:03 PST 2011
#685: Change default constant for empty or unset field of LogWriterAscii
----------------------+--------------------
Reporter: amannb | Owner:
Type: Problem | Status: new
Priority: Normal | Milestone: Bro2.0
Component: Bro | Version:
Resolution: | Keywords:
----------------------+--------------------
Comment (by robin):
On Fri, Nov 18, 2011 at 15:21 -0000, you wrote:
> Tough question. Now that we have bro-cut and people can start
processing
> logs with that and it understands the log format implicitly I think we
> should make empty fields empty. NULL fields can still be "-". What
about
> that?
Not sure I like that. That would indeed work well with bro-cut, but it
make the logs really hard to read visually.
Robin
--
Ticket URL: <http://tracker.bro-ids.org/bro/ticket/685#comment:3>
Bro Tracker <http://tracker.bro-ids.org/bro>
Bro Issue Tracker
More information about the bro-dev
mailing list