[Zeek] Field renaming

Justin Azoff justin at corelight.com
Wed Jun 12 06:01:49 PDT 2019


On Wed, Jun 12, 2019 at 2:30 AM David Decker <x.faith at gmail.com> wrote:
>
> Zeek
>
> Sorry  cant find this, but when did id_resp_h become id.resp_h?
> And well for the rest (renamed _ to . )
> Looked through changelog.

It has always been id.resp_h, you must have had this in your
configuration at one point:

    redef Log::default_scope_sep = "_";


-- 
Justin


More information about the Zeek mailing list