From 0ee5532036ca9d55ded17e26defa32a67f9d98fb Mon Sep 17 00:00:00 2001 From: Jeff Lucovsky Date: Thu, 18 Mar 2021 09:27:48 -0400 Subject: [PATCH] plugin: Add "not set" plugin value type This value is used as a sentinel to determine if the configured eve.json filetype was located. First, the built-in and internal output plugins are checked. If the sentinel value remains set, the external plugins are searched for the filetype. --- src/util-logopenfile.h | 15 +++++++++------ 1 file changed, 9 insertions(+), 6 deletions(-) diff --git a/src/util-logopenfile.h b/src/util-logopenfile.h index 9b22c1f686..e8b4499607 100644 --- a/src/util-logopenfile.h +++ b/src/util-logopenfile.h @@ -33,12 +33,15 @@ #include "suricata-plugin.h" -enum LogFileType { LOGFILE_TYPE_FILE, - LOGFILE_TYPE_SYSLOG, - LOGFILE_TYPE_UNIX_DGRAM, - LOGFILE_TYPE_UNIX_STREAM, - LOGFILE_TYPE_REDIS, - LOGFILE_TYPE_PLUGIN }; +enum LogFileType { + LOGFILE_TYPE_FILE, + LOGFILE_TYPE_SYSLOG, + LOGFILE_TYPE_UNIX_DGRAM, + LOGFILE_TYPE_UNIX_STREAM, + LOGFILE_TYPE_REDIS, + LOGFILE_TYPE_PLUGIN, + LOGFILE_TYPE_NOTSET +}; typedef struct SyslogSetup_ { int alert_syslog_level;