]> git.ipfire.org Git - thirdparty/suricata.git/commit
projects / thirdparty / suricata.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 115d7d3) | patch
script/eve-parity: add script for checking eve/keyword parity
authorJason Ish <jason.ish@oisf.net>
Wed, 19 Feb 2025 22:36:57 +0000 (16:36 -0600)
committerVictor Julien <victor@inliniac.net>
Wed, 5 Mar 2025 14:59:58 +0000 (15:59 +0100)
commit861896ed39cf1f024e5be0ee010d4ce50398dbe8
treef465d333aa4ab41ede94f8c724ea8597cfd0ca92tree | snapshot
parent115d7d3c6dc7a932211a66aabe1bb775efc057cacommit | diff
script/eve-parity: add script for checking eve/keyword parity

Currently this script has two commands: "missing" and "having".

"missing" will show eve fields that do not map to any keywords.

"having" will sohw eve fields along with their keyword mappsings,
while also validating that those keywords really exist.

Related to tickets: #6463, #4772
scripts/eve-parity.py [new file with mode: 0755] blob
Mirror of https://github.com/OISF/suricata.git