[Zeek] input framework - reading data from files - set vs table data structure?

Justin Azoff justin at corelight.com
Tue May 28 09:02:17 PDT 2019


Yep, you just setup a table with only an index like so:

https://github.com/zeek/zeek/blob/master/testing/btest/scripts/base/frameworks/input/set.zeek

On Tue, May 28, 2019 at 11:48 AM Konrad Weglowski <
konrad.weglowski at gmail.com> wrote:

> Hey,
>
> Is there a way to read data from a file into a "set" data structure
> (instead of "table")?
>
> I would like to read contents of the file that has list of domain names
> for example, one per line and store in a "set" data structure variable.
>
> Thanks,
>
> Konrad
> _______________________________________________
> Zeek mailing list
> zeek at zeek.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek



-- 
Justin
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/zeek/attachments/20190528/fc6d5174/attachment.html 


More information about the Zeek mailing list