Project

General

Profile

Actions

Documentation #6478

open

schema: add missing fields

Added by Philippe Antoine about 1 year ago. Updated 17 days ago.

Status:
New
Priority:
Normal
Target version:
Affected Versions:
Effort:
Difficulty:
Label:
Beginner, Good First Issue, Outreachy

Description

With the addition of the JSON schema (see https://github.com/OISF/suricata/blob/master/etc/schema.json) and SV checks to validate it, it's important to ensure that it is complete.

Running git grep set_string rust/src/ | cut -d'"' -f2 | sort | uniq | grep -v : | while read i; do echo -n $i; git grep $i etc/schema.json | wc -l; done | awk '$2 == 0'

shows for instance that server_security_failure_reason is missing in etc/schema.json for rfb


Subtasks 3 (2 open1 closed)

Task #7287: schema/tls: add missing fields cert/ chainResolvedJuliana Fajardini ReichowActions
Task #7288: schema/tls: add missing fields cert/ chain (7.0.x backport)ClosedJuliana Fajardini ReichowActions
Documentation #7298: schema/netflow: add missing fieldNewCommunity TicketActions

Related issues 5 (5 open0 closed)

Related to Suricata - Task #6443: Suricon 2023 brainstormAssignedVictor JulienActions
Related to Suricata - Task #6463: eve/output: investigate how to track coverage / parityNewOISF DevActions
Related to Suricata - Optimization #6502: schema: avoid - and . in keysNewOISF DevActions
Related to Suricata - Documentation #6566: userguide: add description for missing EVE krb fieldsNewOISF DevActions
Related to Suricata - Story #6597: rules: improve rules keyword/output parityNewVictor JulienActions
Actions

Also available in: Atom PDF