[Zeek-Dev] changing format of uid to ULID?

[Justin Azoff]

On Fri, Aug 30, 2019 at 2:17 PM Karl Pietrzak <kap4020 at gmail.com> wrote:

> Good morning everyone.
>
> I'm researching compression of Zeek data.  I'm currently dumping Zeek data
> into Parquet files
>

I don't have much feedback on the uid bits, but I'm very interested in
Parquet!  I had looked into doing this a while back but the tooling around
parquet was very java/big data focussed and not very CLI friendly.  Are you
using the new c++ implementation in a log  writer or are you converting
json to parquet?

-- 
Justin
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.icsi.berkeley.edu/pipermail/zeek-dev/attachments/20190830/a72cad9e/attachment.html