[Zeek] printing stream columns

Henri Dubois-Ferriere henridf at gmail.com
Wed Oct 16 12:45:46 PDT 2019


I'm trying to print the record type for each log stream at startup.
Something like:

 for ( id in Log::active_streams ) {
                 local stream = Log::active_streams[id];
                 print stream$path, stream$columns;
}

doesn't work because $columns is a record type, and gets stringified "<no
value description>".

Is there a way to do this in zeek script?

Thanks,
Henri
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/zeek/attachments/20191016/f37d154a/attachment.html 


More information about the Zeek mailing list