From: Jason Ish <jason.ish@oisf.net>
Date: Fri, 21 Feb 2025 20:58:47 +0000 (-0600)
Subject: eve-parity: skip transform keywords
X-Git-Tag: suricata-8.0.0-beta1~311
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=6477b31199a3b57f5273a43aebe2a6f0dbd5ecfc;p=thirdparty%2Fsuricata.git

eve-parity: skip transform keywords
---

diff --git a/scripts/eve-parity.py b/scripts/eve-parity.py
index 07b25ebf6f..7599f7f60d 100755
--- a/scripts/eve-parity.py
+++ b/scripts/eve-parity.py
@@ -139,6 +139,10 @@ def load_known_keywords():
     for line in lines[1:]:
         parts = line.split(";")
         if parts:
+            # Skip transforms.
+            if len(parts) > 3 and parts[3].find("transform") > -1:
+                continue
+
             keywords.add(parts[0])
     return keywords