main.zeek¶

LogFilter¶

This attaches a set of predicates to all logs, and then creates a hook for that predicate. The hooks get called by priority. If any hook handler breaks out of the hook, the message does not get logged.

Namespace: LogFilter
Imports: base/frameworks/logging

Summary¶

Events¶

LogFilter::initialized: event

Handle this event to create additional streams

Hooks¶

LogFilter::pred_hook: hook

If any handler breaks out of this, the record won’t be logged

Detailed Interface¶

Events¶

LogFilter::initialized¶

Type: event ()

Handle this event to create additional streams

Hooks¶

LogFilter::pred_hook¶

Type: hook (stream: Log::ID, filter_name: string, rec: any) : bool

If any handler breaks out of this, the record won’t be logged