|
985d7d28ed
|
add -n support (ipv4)
|
2022-08-19 21:36:15 -07:00 |
|
|
9ddaddfaa0
|
add case for timestamp-style datetime fields
|
2022-08-19 20:36:58 -07:00 |
|
|
de11ae20a4
|
add git, syslog, and cef timestamp tests
|
2022-08-19 09:06:46 -07:00 |
|
|
89574faef7
|
remove underscore in CEF_Version, doc update, timestamp optimization
|
2022-08-19 08:44:23 -07:00 |
|
|
7bf6f1b870
|
formatting
|
2022-08-18 11:24:49 -07:00 |
|
|
0ee0cb35bc
|
add escape chars to doc
|
2022-08-18 11:23:03 -07:00 |
|
|
780eb05553
|
doc update
|
2022-08-18 11:19:11 -07:00 |
|
|
d71a7fbbed
|
cleanup custom field processing and add datetime support
|
2022-08-18 10:55:37 -07:00 |
|
|
5b597b6583
|
move conversions into process(). initial timestamp fields working
|
2022-08-17 17:46:24 -07:00 |
|
|
42b24d71e9
|
add CEF time formats
|
2022-08-17 17:45:47 -07:00 |
|
|
07c65351d5
|
rename keys to match spec. attempt type conversions for extended fields.
|
2022-08-17 15:20:18 -07:00 |
|
|
cadf7e732e
|
doc formatting
|
2022-08-17 12:54:12 -07:00 |
|
|
8682a6bd0a
|
normalize key names
|
2022-08-16 21:08:44 -07:00 |
|
|
e20357663d
|
doc formatting
|
2022-08-16 17:13:53 -07:00 |
|
|
e777992b3e
|
add schema docs
|
2022-08-16 17:12:09 -07:00 |
|
|
5f43abc908
|
strip newline at the end of each line string
|
2022-08-16 17:00:09 -07:00 |
|
|
8cbd92ccb6
|
add unparsable warning message
|
2022-08-16 16:39:00 -07:00 |
|
|
80b4f7d037
|
add streamin syslog parsers
|
2022-08-16 16:33:50 -07:00 |
|
|
d5839e199f
|
add syslog-bsd-s streaming parser
|
2022-08-16 16:15:03 -07:00 |
|
|
4b9ed91546
|
regex formatting
|
2022-08-16 15:59:08 -07:00 |
|
|
2e9b9ab987
|
tighten up priority parsing
|
2022-08-16 15:10:00 -07:00 |
|
|
9a50a0cc2c
|
doc update
|
2022-08-16 14:43:05 -07:00 |
|
|
167ea6dfcf
|
add several fields based on user feedback
|
2022-08-16 14:36:00 -07:00 |
|
|
f17d9ccbd6
|
doc update
|
2022-08-16 10:01:31 -07:00 |
|
|
8a6bbc55d2
|
fix for missing tag
|
2022-08-16 10:01:27 -07:00 |
|
|
d42ec58ad1
|
remove colon at the end of the hostname if it exists.
|
2022-08-15 18:21:58 -07:00 |
|
|
c82c6a88f8
|
add tests
|
2022-08-15 18:10:48 -07:00 |
|
|
e7c8778e30
|
add docs, int conversion, and better rfc compliance
|
2022-08-15 18:10:43 -07:00 |
|
|
7c4cf66243
|
add syslog tests
|
2022-08-15 16:54:10 -07:00 |
|
|
b4b3a11f01
|
tighten up key/value split
|
2022-08-15 16:54:02 -07:00 |
|
|
17ce869939
|
add warning for unparsable lines
|
2022-08-15 15:39:20 -07:00 |
|
|
05fd3cf787
|
add mdadm tests
|
2022-08-15 15:11:54 -07:00 |
|
|
3daf90c5fe
|
doc formatting
|
2022-08-15 13:51:48 -07:00 |
|
|
02db3baf52
|
move test fixtures
|
2022-08-15 11:14:26 -07:00 |
|
|
0bc7311473
|
doc update
|
2022-08-15 11:14:17 -07:00 |
|
|
2fda7af8a7
|
change values to parameters in schema
|
2022-08-14 12:18:22 -07:00 |
|
|
0cd471dfb2
|
doc update
|
2022-08-14 12:11:31 -07:00 |
|
|
20982ab1a6
|
doc update
|
2022-08-14 12:03:16 -07:00 |
|
|
81ed9c0c5c
|
add timestamps
|
2022-08-14 11:48:41 -07:00 |
|
|
23263bd83e
|
add support for strings with UTC offset suffixes
|
2022-08-14 11:48:24 -07:00 |
|
|
4d3d608e5c
|
add support for ISO-like formats
|
2022-08-14 10:52:58 -07:00 |
|
|
850a02b4c0
|
formatting
|
2022-08-12 18:20:11 -07:00 |
|
|
2d4ace68e7
|
fix escape character fixups
|
2022-08-12 18:04:22 -07:00 |
|
|
9adc66af63
|
version bump to 1.21.0
|
2022-08-12 17:35:47 -07:00 |
|
|
c24c5f7985
|
extract structured data. need to fix corner cases
|
2022-08-12 17:35:28 -07:00 |
|
|
5f280c3e24
|
doc update
|
2022-08-12 10:16:15 -07:00 |
|
|
edff49a44f
|
add syslog parsers
|
2022-08-11 13:29:53 -07:00 |
|
|
345431bbcc
|
add more escape chars
|
2022-08-09 21:33:54 -07:00 |
|
|
b087e712ca
|
initial cef parser
|
2022-08-09 20:25:54 -07:00 |
|
|
b7a281c6c4
|
add val fields and append device table flags to state
|
2022-08-07 15:11:16 -07:00 |
|