eve: dns: global metadata config

pull/3201/head
Jason Ish 8 years ago committed by Victor Julien
parent 4a05160353
commit 23bbbc5818

@ -254,6 +254,7 @@ static struct {
typedef struct LogDnsFileCtx_ { typedef struct LogDnsFileCtx_ {
LogFileCtx *file_ctx; LogFileCtx *file_ctx;
uint64_t flags; /** Store mode */ uint64_t flags; /** Store mode */
bool include_metadata;
} LogDnsFileCtx; } LogDnsFileCtx;
typedef struct LogDnsLogThread_ { typedef struct LogDnsLogThread_ {
@ -666,6 +667,9 @@ static int JsonDnsLoggerToServer(ThreadVars *tv, void *thread_data,
if (unlikely(js == NULL)) { if (unlikely(js == NULL)) {
return TM_ECODE_OK; return TM_ECODE_OK;
} }
if (dnslog_ctx->include_metadata) {
JsonAddMetadata(p, f, js);
}
json_t *dns = rs_dns_log_json_query(txptr, i, td->dnslog_ctx->flags); json_t *dns = rs_dns_log_json_query(txptr, i, td->dnslog_ctx->flags);
if (unlikely(dns == NULL)) { if (unlikely(dns == NULL)) {
json_decref(js); json_decref(js);
@ -683,6 +687,9 @@ static int JsonDnsLoggerToServer(ThreadVars *tv, void *thread_data,
js = CreateJSONHeader((Packet *)p, 1, "dns"); js = CreateJSONHeader((Packet *)p, 1, "dns");
if (unlikely(js == NULL)) if (unlikely(js == NULL))
return TM_ECODE_OK; return TM_ECODE_OK;
if (dnslog_ctx->include_metadata) {
JsonAddMetadata(p, f, js);
}
LogQuery(td, js, tx, tx_id, query); LogQuery(td, js, tx, tx_id, query);
@ -708,6 +715,10 @@ static int JsonDnsLoggerToClient(ThreadVars *tv, void *thread_data,
js = CreateJSONHeader((Packet *)p, 0, "dns"); js = CreateJSONHeader((Packet *)p, 0, "dns");
if (dnslog_ctx->include_metadata) {
JsonAddMetadata(p, f, js);
}
#if HAVE_RUST #if HAVE_RUST
/* Log answers. */ /* Log answers. */
for (uint16_t i = 0; i < 0xffff; i++) { for (uint16_t i = 0; i < 0xffff; i++) {
@ -863,6 +874,7 @@ static OutputInitResult JsonDnsLogInitCtxSub(ConfNode *conf, OutputCtx *parent_c
memset(dnslog_ctx, 0x00, sizeof(LogDnsFileCtx)); memset(dnslog_ctx, 0x00, sizeof(LogDnsFileCtx));
dnslog_ctx->file_ctx = ojc->file_ctx; dnslog_ctx->file_ctx = ojc->file_ctx;
dnslog_ctx->include_metadata = ojc->include_metadata;
OutputCtx *output_ctx = SCCalloc(1, sizeof(OutputCtx)); OutputCtx *output_ctx = SCCalloc(1, sizeof(OutputCtx));
if (unlikely(output_ctx == NULL)) { if (unlikely(output_ctx == NULL)) {

Loading…
Cancel
Save