eve/schema: add host

The "host" field is added to EVE events if the "sensor-name" field is
configured in suricata.yaml.

diff --git a/etc/schema.json b/etc/schema.json
index 1e945a276820823b0c2e8412366087ec1e80b58c..1b49cf5af1fc9c71bf18a87ce9ec5981adcbcdd2 100644 (file)
--- a/etc/schema.json
+++ b/etc/schema.json
@@ -39,6 +39,11 @@
         "flow_id": {
             "type": "integer"
         },
+        "host": {
+            "$comment": "May change to sensor_name in the future, or become user configurable: https://redmine.openinfosecfoundation.org/issues/4919",
+            "description": "the sensor-name, if configured",
+            "type": "string"
+        },
         "icmp_code": {
             "type": "integer"
         },