eve/schema: add pcap_filename field

diff --git a/etc/schema.json b/etc/schema.json
index 835858ea4a8be2871c82dfeb0272edf6564bce27..57c9cf73b7969076a6100cb87f270f71a4e2b3c5 100644 (file)
--- a/etc/schema.json
+++ b/etc/schema.json
@@ -64,6 +64,10 @@
             "type": "integer",
             "optional": true
         },
+        "pcap_filename": {
+            "type": "string",
+            "optional": true
+        },
         "pkt_src": {
             "type": "string"
         },