New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Enable loading of concepts from disk #1102
Conversation
f6d5c9e
to
759dc50
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Nice work overall.
It would be great if we can test an ill-formed concept definition as well.
1decade
to
fe174ca
Compare
// Local commands need access to the node actor. | ||
// This is a side-channel to communicate the self pointer into the spawn- and | ||
// send-command functions, whose interfaces are constrained by the command | ||
// factory. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Do you see a way to get rid of this wart at some point in the future?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
In retrospect, the invocation
based interface to the node turned out as less elegant that we'd hoped. I would like to replace it with something more type-safe at some point, but that will require one or two design sessions first.
I tested the feature with a custom URL concept that pulls data from Zeek and Suricata logs: - concept:
name: url
fields:
- zeek.http.uri
- suricata.http.http.url Nice work! Just cosmetic stuff to be fixed. |
Co-authored-by: Matthias Vallentin <matthias@tenzir.com>
e5f48a3
to
aff6f17
Compare
TODO: