void JsonDCERPCLogRegister(void)
{
/* Register as an eve sub-module. */
- OutputRegisterTxSubModule(LOGGER_JSON_DCERPC, "eve-log", "JsonDCERPCLog",
- "eve-log.dcerpc", DCERPCLogInitSub, ALPROTO_DCERPC,
- JsonDCERPCLogger, JsonLogThreadInit,
- JsonLogThreadDeinit, NULL);
+ OutputRegisterTxSubModule(LOGGER_JSON_TX, "eve-log", "JsonDCERPCLog", "eve-log.dcerpc",
+ DCERPCLogInitSub, ALPROTO_DCERPC, JsonDCERPCLogger, JsonLogThreadInit,
+ JsonLogThreadDeinit, NULL);
SCLogDebug("DCERPC JSON logger registered.");
}
void JsonDHCPLogRegister(void)
{
/* Register as an eve sub-module. */
- OutputRegisterTxSubModule(LOGGER_JSON_DHCP, "eve-log", "JsonDHCPLog",
- "eve-log.dhcp", OutputDHCPLogInitSub, ALPROTO_DHCP,
- JsonDHCPLogger, JsonDHCPLogThreadInit,
- JsonDHCPLogThreadDeinit, NULL);
+ OutputRegisterTxSubModule(LOGGER_JSON_TX, "eve-log", "JsonDHCPLog", "eve-log.dhcp",
+ OutputDHCPLogInitSub, ALPROTO_DHCP, JsonDHCPLogger, JsonDHCPLogThreadInit,
+ JsonDHCPLogThreadDeinit, NULL);
}
#define MODULE_NAME "JsonDnsLog"
void JsonDnsLogRegister (void)
{
- OutputRegisterTxSubModule(LOGGER_JSON_DNS, "eve-log", MODULE_NAME, "eve-log.dns",
+ OutputRegisterTxSubModule(LOGGER_JSON_TX, "eve-log", MODULE_NAME, "eve-log.dns",
JsonDnsLogInitCtxSub, ALPROTO_DNS, JsonDnsLogger, LogDnsLogThreadInit,
LogDnsLogThreadDeinit, NULL);
}
void JsonFTPLogRegister(void)
{
/* Register as an eve sub-module. */
- OutputRegisterTxSubModule(LOGGER_JSON_FTP, "eve-log", "JsonFTPLog", "eve-log.ftp",
+ OutputRegisterTxSubModule(LOGGER_JSON_TX, "eve-log", "JsonFTPLog", "eve-log.ftp",
OutputFTPLogInitSub, ALPROTO_FTP, JsonFTPLogger, JsonLogThreadInit, JsonLogThreadDeinit,
NULL);
- OutputRegisterTxSubModule(LOGGER_JSON_FTP, "eve-log", "JsonFTPLog", "eve-log.ftp",
+ OutputRegisterTxSubModule(LOGGER_JSON_TX, "eve-log", "JsonFTPLog", "eve-log.ftp",
OutputFTPLogInitSub, ALPROTO_FTPDATA, JsonFTPLogger, JsonLogThreadInit,
JsonLogThreadDeinit, NULL);
void JsonHttpLogRegister (void)
{
/* register as child of eve-log */
- OutputRegisterTxSubModule(LOGGER_JSON_HTTP, "eve-log", "JsonHttpLog", "eve-log.http",
+ OutputRegisterTxSubModule(LOGGER_JSON_TX, "eve-log", "JsonHttpLog", "eve-log.http",
OutputHttpLogInitSub, ALPROTO_HTTP1, JsonHttpLogger, JsonHttpLogThreadInit,
JsonHttpLogThreadDeinit, NULL);
}
void JsonHttp2LogRegister (void)
{
/* also register as child of eve-log */
- OutputRegisterTxSubModuleWithProgress(LOGGER_JSON_HTTP2,
- "eve-log", MODULE_NAME, "eve-log.http2",
- OutputHttp2LogInitSub, ALPROTO_HTTP2, JsonHttp2Logger,
- HTTP2StateClosed, HTTP2StateClosed,
- JsonHttp2LogThreadInit, JsonHttp2LogThreadDeinit, NULL);
+ OutputRegisterTxSubModuleWithProgress(LOGGER_JSON_TX, "eve-log", MODULE_NAME, "eve-log.http2",
+ OutputHttp2LogInitSub, ALPROTO_HTTP2, JsonHttp2Logger, HTTP2StateClosed,
+ HTTP2StateClosed, JsonHttp2LogThreadInit, JsonHttp2LogThreadDeinit, NULL);
}
void JsonIKELogRegister(void)
{
/* Register as an eve sub-module. */
- OutputRegisterTxSubModule(LOGGER_JSON_IKE, "eve-log", "JsonIKELog", "eve-log.ike",
+ OutputRegisterTxSubModule(LOGGER_JSON_TX, "eve-log", "JsonIKELog", "eve-log.ike",
OutputIKELogInitSub, ALPROTO_IKE, JsonIKELogger, JsonIKELogThreadInit,
JsonIKELogThreadDeinit, NULL);
}
void JsonKRB5LogRegister(void)
{
/* Register as an eve sub-module. */
- OutputRegisterTxSubModule(LOGGER_JSON_KRB5, "eve-log", "JsonKRB5Log", "eve-log.krb5",
+ OutputRegisterTxSubModule(LOGGER_JSON_TX, "eve-log", "JsonKRB5Log", "eve-log.krb5",
OutputKRB5LogInitSub, ALPROTO_KRB5, JsonKRB5Logger, JsonLogThreadInit,
JsonLogThreadDeinit, NULL);
void JsonModbusLogRegister(void)
{
/* Register as an eve sub-module. */
- OutputRegisterTxSubModule(LOGGER_JSON_MODBUS, "eve-log", "JsonModbusLog", "eve-log.modbus",
+ OutputRegisterTxSubModule(LOGGER_JSON_TX, "eve-log", "JsonModbusLog", "eve-log.modbus",
OutputModbusLogInitSub, ALPROTO_MODBUS, JsonModbusLogger, JsonModbusLogThreadInit,
JsonModbusLogThreadDeinit, NULL);
void JsonMQTTLogRegister(void)
{
- OutputRegisterTxSubModule(LOGGER_JSON_MQTT, "eve-log",
- "JsonMQTTLog", "eve-log.mqtt",
- OutputMQTTLogInitSub, ALPROTO_MQTT, JsonMQTTLogger,
- JsonMQTTLogThreadInit, JsonMQTTLogThreadDeinit, NULL);
+ OutputRegisterTxSubModule(LOGGER_JSON_TX, "eve-log", "JsonMQTTLog", "eve-log.mqtt",
+ OutputMQTTLogInitSub, ALPROTO_MQTT, JsonMQTTLogger, JsonMQTTLogThreadInit,
+ JsonMQTTLogThreadDeinit, NULL);
}
void JsonNFSLogRegister(void)
{
/* Register as an eve sub-module. */
- OutputRegisterTxSubModule(LOGGER_JSON_NFS, "eve-log", "JsonNFSLog",
- "eve-log.nfs", NFSLogInitSub, ALPROTO_NFS,
- JsonNFSLogger, JsonLogThreadInit,
- JsonLogThreadDeinit, NULL);
+ OutputRegisterTxSubModule(LOGGER_JSON_TX, "eve-log", "JsonNFSLog", "eve-log.nfs", NFSLogInitSub,
+ ALPROTO_NFS, JsonNFSLogger, JsonLogThreadInit, JsonLogThreadDeinit, NULL);
SCLogDebug("NFS JSON logger registered.");
}
}
/* PGSQL_END_REMOVE */
/* Register as an eve sub-module. */
- OutputRegisterTxSubModule(LOGGER_JSON_PGSQL, "eve-log", "JsonPgsqlLog", "eve-log.pgsql",
+ OutputRegisterTxSubModule(LOGGER_JSON_TX, "eve-log", "JsonPgsqlLog", "eve-log.pgsql",
OutputPgsqlLogInitSub, ALPROTO_PGSQL, JsonPgsqlLogger, JsonPgsqlLogThreadInit,
JsonPgsqlLogThreadDeinit, NULL);
void JsonQuicLogRegister(void)
{
/* Register as an eve sub-module. */
- OutputRegisterTxSubModule(LOGGER_JSON_QUIC, "eve-log", "JsonQuicLog", "eve-log.quic",
+ OutputRegisterTxSubModule(LOGGER_JSON_TX, "eve-log", "JsonQuicLog", "eve-log.quic",
OutputQuicLogInitSub, ALPROTO_QUIC, JsonQuicLogger, JsonQuicLogThreadInit,
JsonQuicLogThreadDeinit, NULL);
void JsonRdpLogRegister(void)
{
/* Register as an eve sub-module. */
- OutputRegisterTxSubModule(LOGGER_JSON_RDP, "eve-log", "JsonRdpLog", "eve-log.rdp",
+ OutputRegisterTxSubModule(LOGGER_JSON_TX, "eve-log", "JsonRdpLog", "eve-log.rdp",
OutputRdpLogInitSub, ALPROTO_RDP, JsonRdpLogger, JsonLogThreadInit, JsonLogThreadDeinit,
NULL);
void JsonRFBLogRegister(void)
{
/* Register as an eve sub-module. */
- OutputRegisterTxSubModule(LOGGER_JSON_RFB, "eve-log", "JsonRFBLog", "eve-log.rfb",
+ OutputRegisterTxSubModule(LOGGER_JSON_TX, "eve-log", "JsonRFBLog", "eve-log.rfb",
OutputRFBLogInitSub, ALPROTO_RFB, JsonRFBLogger, JsonLogThreadInit, JsonLogThreadDeinit,
NULL);
}
void JsonSIPLogRegister(void)
{
/* Register as an eve sub-module. */
- OutputRegisterTxSubModule(LOGGER_JSON_SIP, "eve-log", "JsonSIPLog", "eve-log.sip",
+ OutputRegisterTxSubModule(LOGGER_JSON_TX, "eve-log", "JsonSIPLog", "eve-log.sip",
OutputSIPLogInitSub, ALPROTO_SIP, JsonSIPLogger, JsonLogThreadInit, JsonLogThreadDeinit,
NULL);
void JsonSMBLogRegister(void)
{
/* Register as an eve sub-module. */
- OutputRegisterTxSubModule(LOGGER_JSON_SMB, "eve-log", "JsonSMBLog",
- "eve-log.smb", SMBLogInitSub, ALPROTO_SMB,
- JsonSMBLogger, JsonLogThreadInit,
- JsonLogThreadDeinit, NULL);
+ OutputRegisterTxSubModule(LOGGER_JSON_TX, "eve-log", "JsonSMBLog", "eve-log.smb", SMBLogInitSub,
+ ALPROTO_SMB, JsonSMBLogger, JsonLogThreadInit, JsonLogThreadDeinit, NULL);
SCLogDebug("SMB JSON logger registered.");
}
void JsonSmtpLogRegister (void) {
/* register as child of eve-log */
- OutputRegisterTxSubModule(LOGGER_JSON_SMTP, "eve-log", "JsonSmtpLog",
- "eve-log.smtp", OutputSmtpLogInitSub, ALPROTO_SMTP, JsonSmtpLogger,
- JsonSmtpLogThreadInit, JsonSmtpLogThreadDeinit, NULL);
+ OutputRegisterTxSubModule(LOGGER_JSON_TX, "eve-log", "JsonSmtpLog", "eve-log.smtp",
+ OutputSmtpLogInitSub, ALPROTO_SMTP, JsonSmtpLogger, JsonSmtpLogThreadInit,
+ JsonSmtpLogThreadDeinit, NULL);
}
void JsonSNMPLogRegister(void)
{
/* Register as an eve sub-module. */
- OutputRegisterTxSubModule(LOGGER_JSON_SNMP, "eve-log", "JsonSNMPLog", "eve-log.snmp",
+ OutputRegisterTxSubModule(LOGGER_JSON_TX, "eve-log", "JsonSNMPLog", "eve-log.snmp",
OutputSNMPLogInitSub, ALPROTO_SNMP, JsonSNMPLogger, JsonLogThreadInit,
JsonLogThreadDeinit, NULL);
void JsonSshLogRegister (void)
{
/* register as child of eve-log */
- OutputRegisterTxSubModuleWithCondition(LOGGER_JSON_SSH, "eve-log", "JsonSshLog", "eve-log.ssh",
+ OutputRegisterTxSubModuleWithCondition(LOGGER_JSON_TX, "eve-log", "JsonSshLog", "eve-log.ssh",
OutputSshLogInitSub, ALPROTO_SSH, JsonSshLogger, SSHTxLogCondition, JsonLogThreadInit,
JsonLogThreadDeinit, NULL);
}
}
/* TEMPLATE_END_REMOVE */
/* Register as an eve sub-module. */
- OutputRegisterTxSubModule(LOGGER_JSON_TEMPLATE_RUST, "eve-log",
- "JsonTemplateRustLog", "eve-log.template-rust",
- OutputTemplateLogInitSub, ALPROTO_TEMPLATE_RUST, JsonTemplateLogger,
- JsonTemplateLogThreadInit, JsonTemplateLogThreadDeinit, NULL);
+ OutputRegisterTxSubModule(LOGGER_JSON_TX, "eve-log", "JsonTemplateRustLog",
+ "eve-log.template-rust", OutputTemplateLogInitSub, ALPROTO_TEMPLATE_RUST,
+ JsonTemplateLogger, JsonTemplateLogThreadInit, JsonTemplateLogThreadDeinit, NULL);
SCLogNotice("Template JSON logger registered.");
}
}
/* TEMPLATE_END_REMOVE */
/* Register as an eve sub-module. */
- OutputRegisterTxSubModule(LOGGER_JSON_TEMPLATE, "eve-log", "JsonTemplateLog",
- "eve-log.template", OutputTemplateLogInitSub, ALPROTO_TEMPLATE,
- JsonTemplateLogger, JsonTemplateLogThreadInit,
- JsonTemplateLogThreadDeinit, NULL);
+ OutputRegisterTxSubModule(LOGGER_JSON_TX, "eve-log", "JsonTemplateLog", "eve-log.template",
+ OutputTemplateLogInitSub, ALPROTO_TEMPLATE, JsonTemplateLogger,
+ JsonTemplateLogThreadInit, JsonTemplateLogThreadDeinit, NULL);
SCLogNotice("Template JSON logger registered.");
}
void JsonTFTPLogRegister(void)
{
/* Register as an eve sub-module. */
- OutputRegisterTxSubModule(LOGGER_JSON_TFTP, "eve-log", "JsonTFTPLog", "eve-log.tftp",
+ OutputRegisterTxSubModule(LOGGER_JSON_TX, "eve-log", "JsonTFTPLog", "eve-log.tftp",
OutputTFTPLogInitSub, ALPROTO_TFTP, JsonTFTPLogger, JsonLogThreadInit,
JsonLogThreadDeinit, NULL);
void JsonTlsLogRegister (void)
{
/* register as child of eve-log */
- OutputRegisterTxSubModuleWithProgress(LOGGER_JSON_TLS, "eve-log",
- "JsonTlsLog", "eve-log.tls", OutputTlsLogInitSub, ALPROTO_TLS,
- JsonTlsLogger, TLS_HANDSHAKE_DONE, TLS_HANDSHAKE_DONE,
- JsonTlsLogThreadInit, JsonTlsLogThreadDeinit, NULL);
+ OutputRegisterTxSubModuleWithProgress(LOGGER_JSON_TX, "eve-log", "JsonTlsLog", "eve-log.tls",
+ OutputTlsLogInitSub, ALPROTO_TLS, JsonTlsLogger, TLS_HANDSHAKE_DONE, TLS_HANDSHAKE_DONE,
+ JsonTlsLogThreadInit, JsonTlsLogThreadDeinit, NULL);
}
LOGGER_HTTP,
LOGGER_TLS_STORE,
LOGGER_TLS,
- LOGGER_JSON_DNS,
- LOGGER_JSON_HTTP,
- LOGGER_JSON_SMTP,
- LOGGER_JSON_TLS,
- LOGGER_JSON_NFS,
- LOGGER_JSON_TFTP,
- LOGGER_JSON_FTP,
+ LOGGER_JSON_TX,
+
+ /* DNP3 loggers. These ones don't fit the common model of a
+ transaction logger yet so are left with their own IDs for
+ now. */
LOGGER_JSON_DNP3_TS,
LOGGER_JSON_DNP3_TC,
- LOGGER_JSON_SSH,
- LOGGER_JSON_SMB,
- LOGGER_JSON_IKE,
- LOGGER_JSON_KRB5,
- LOGGER_JSON_QUIC,
- LOGGER_JSON_MODBUS,
- LOGGER_JSON_DHCP,
- LOGGER_JSON_SNMP,
- LOGGER_JSON_SIP,
- LOGGER_JSON_TEMPLATE_RUST,
- LOGGER_JSON_RFB,
- LOGGER_JSON_MQTT,
- LOGGER_JSON_PGSQL,
- LOGGER_JSON_TEMPLATE,
- LOGGER_JSON_RDP,
- LOGGER_JSON_DCERPC,
- LOGGER_JSON_HTTP2,
LOGGER_FILE,
LOGGER_FILEDATA,
- /** \warning when we exceed what we can express as a u32 flag here we need to update
- * LoggerFlags::flags (u32) and `tx_logged` in src/output-tx.c */
+ /** \warning Note that transaction loggers here with a value > 31
+ will not work. */
/* non-tx loggers below */
CASE_CODE (LOGGER_ALERT_SYSLOG);
CASE_CODE (LOGGER_JSON_ALERT);
CASE_CODE (LOGGER_JSON_ANOMALY);
- CASE_CODE (LOGGER_JSON_DROP);
- CASE_CODE (LOGGER_JSON_SSH);
- CASE_CODE (LOGGER_JSON_SMB);
- CASE_CODE (LOGGER_JSON_NFS);
+ CASE_CODE(LOGGER_JSON_DROP);
CASE_CODE(LOGGER_JSON_FRAME);
CASE_CODE (LOGGER_HTTP);
- CASE_CODE(LOGGER_JSON_DNS);
+ CASE_CODE(LOGGER_JSON_TX);
CASE_CODE (LOGGER_JSON_DNP3_TS);
- CASE_CODE (LOGGER_JSON_DNP3_TC);
- CASE_CODE (LOGGER_JSON_HTTP);
- CASE_CODE(LOGGER_JSON_QUIC);
- CASE_CODE (LOGGER_JSON_DHCP);
- CASE_CODE (LOGGER_JSON_KRB5);
- CASE_CODE(LOGGER_JSON_IKE);
- CASE_CODE(LOGGER_JSON_MODBUS);
- CASE_CODE (LOGGER_JSON_FTP);
- CASE_CODE (LOGGER_JSON_TFTP);
- CASE_CODE (LOGGER_JSON_SMTP);
- CASE_CODE (LOGGER_JSON_SNMP);
- CASE_CODE (LOGGER_JSON_TLS);
- CASE_CODE (LOGGER_JSON_SIP);
- CASE_CODE (LOGGER_JSON_TEMPLATE_RUST);
- CASE_CODE (LOGGER_JSON_RFB);
- CASE_CODE (LOGGER_JSON_MQTT);
- CASE_CODE(LOGGER_JSON_PGSQL);
- CASE_CODE (LOGGER_JSON_TEMPLATE);
- CASE_CODE (LOGGER_JSON_RDP);
- CASE_CODE (LOGGER_JSON_DCERPC);
- CASE_CODE (LOGGER_JSON_HTTP2);
+ CASE_CODE(LOGGER_JSON_DNP3_TC);
CASE_CODE (LOGGER_TLS_STORE);
CASE_CODE (LOGGER_TLS);
CASE_CODE (LOGGER_FILE_STORE);