From: Jason Ish <jason.ish@oisf.net>
Date: Thu, 10 Aug 2023 17:38:18 +0000 (-0600)
Subject: eve/schema: add host
X-Git-Tag: suricata-7.0.1~44
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=3802a515521151617ab63fcc17d5fa49c90203a7;p=thirdparty%2Fsuricata.git

eve/schema: add host

The "host" field is added to EVE events if the "sensor-name" field is
configured in suricata.yaml.
---

diff --git a/etc/schema.json b/etc/schema.json
index 1e945a2768..1b49cf5af1 100644
--- a/etc/schema.json
+++ b/etc/schema.json
@@ -39,6 +39,11 @@
         "flow_id": {
             "type": "integer"
         },
+        "host": {
+            "$comment": "May change to sensor_name in the future, or become user configurable: https://redmine.openinfosecfoundation.org/issues/4919",
+            "description": "the sensor-name, if configured",
+            "type": "string"
+        },
         "icmp_code": {
             "type": "integer"
         },