Move options from format to the import subcommand

[tobim]

📔 Description

The options listen, read, schema, schema-file, type, and uds can from now on be supplied to the import command directly. They can still be used after the format subcommand, but that usage is deprecated.

📝 Checklist

• All user-facing changes have changelog entries.
• The changes are reflected on docs.tenzir.com/vast, if necessary.
• The PR description contains instructions for the reviewer, if necessary.

🎯 Review Instructions

By commit.

[tobim]

I guess it would be a good idea to do the same for the sink options write and uds.

[dominiklohmann]

Quoting myself from the story:

I have another thought on this: Consider this file:

vast:
  import:
    pcap:
      interface: en0
    read: path/to/file.pcap

What does vast import pcap do in this case?

Similarly, consider this currently valid file:

vast:
  import:
    suricata:
      read: path/to/eve.json
    zeek
      read: path/to/conn.log

How would you express this with your proposed changes?

I did not look at the code yet, but I would like to see these questions answered before we merge a change like this.

[tobim]

Quoting myself from the story:

I have another thought on this: Consider this file:

vast:
  import:
    pcap:
      interface: en0
    read: path/to/file.pcap

This is not different from

vast:
  import:
    pcap:
      interface: en0
      read: path/to/file.pcap

The pcap implementation prefers the interface key in both cases.

Similarly, consider this currently valid file:

vast:
  import:
    suricata:
      read: path/to/eve.json
    zeek
      read: path/to/conn.log

How would you express this with your proposed changes?

While valid, the utility of such a config is extremely limited. If we really want to allow users to specify their imports declaratively they should either have a separate config file per import process or this has to become a list in a unified config file.

[dominiklohmann]

Reasoning checks out. I think it'd be nice if this same PR can also make the changes on the export side so it stays symmetrical.

[tobim]

Reasoning checks out. I think it'd be nice if this same PR can also make the changes on the export side so it stays symmetrical.

Will do after the rebase on top of #1356.