Project

General

Profile

Actions
Copy link

Feature #6456

open

output: binary logging

Added by Philippe Antoine almost 2 years ago. Updated 20 days ago.

Status:
New
Priority:
Normal
Assignee:
OISF Dev
Target version:
TBD
Effort:
Difficulty:
Label:

Description

Instead of just json, Suricata should be able to create some structures and output them in different formats : CSV, BSON, protobuf, flatbuffers, etc...

Related issues 2 (2 open — 0 closed)

Related to Suricata - Task #6443: Suricon 2023 brainstormAssignedVictor JulienActions
Related to Suricata - Bug #6458: eve/http: discrepancy in http events and http objects logged in alertsNewOISF DevActions
Actions
Copy link
 #1

Updated by Philippe Antoine almost 2 years ago

  • Related to Task #6443: Suricon 2023 brainstorm added
Actions
Copy link
 #2

Updated by Jason Ish almost 2 years ago

  • Related to Bug #6458: eve/http: discrepancy in http events and http objects logged in alerts added
Actions
Copy link
 #3

Updated by Victor Julien almost 2 years ago

  • Subject changed from Binary output logging to output: binary logging

@Jason Ish has some ideas here. It's unlikely that we would support that whole list, but we're thinking about making it possible to support a binary output. Perhaps plugin support could then be used to support others.

Actions
Copy link
 #4

Updated by Jamie Lavigne 20 days ago

Ion could be a candidate that could coexist well with the existing JSON outputs: https://amazon-ion.github.io/ion-docs/index.html

Actions
Copy link

Also available in: Atom PDF