[Bro-Dev] #942: Generic log delaying mechanism for logging framework

Bro Tracker bro at tracker.bro-ids.org
Mon Feb 4 13:23:12 PST 2013


#942: Generic log delaying mechanism for logging framework
-----------------------------+------------------------
 Reporter:  seth             |      Owner:  seth
     Type:  Feature Request  |     Status:  new
 Priority:  Low              |  Milestone:  Bro2.2
Component:  Bro              |    Version:  git/master
 Keywords:                   |
-----------------------------+------------------------
 We need to add a mechanism for delaying log writes within the logging
 framework for the case where some asynchronous lookup needs to happen in a
 non-base script.  There are a few requirements:

  - The mechanism needs to copy the log record so that future modifications
 of the record aren't impacted unless deliberately modifying the delayed
 record.
  - Three functions in Log:: namespace to register and unregister delays
 for logs and one to get access to the delayed log by it's delay token.
  - Additional configuration option in logging framework to configure a
 default logging delay.  It's possible that we should set the default
 stream delay in the stream configuration record.

-- 
Ticket URL: <http://tracker.bro-ids.org/bro/ticket/942>
Bro Tracker <http://tracker.bro-ids.org/bro>
Bro Issue Tracker



More information about the bro-dev mailing list