base/frameworks/input/readers/sqlite.zeek

InputSQLite

Interface for the SQLite input reader. Redefinable options are available to tweak the input format of the SQLite reader.

See SQLite Input/Logging for an introduction on how to use the SQLite reader.

When using the SQLite reader, you have to specify the SQL query that returns the desired data by setting query in the config table. See the introduction mentioned above for an example.

Namespace

InputSQLite

Summary

Redefinable Options

InputSQLite::empty_field: string &redef

String to use for empty fields.

InputSQLite::set_separator: string &redef

Separator between set elements.

InputSQLite::unset_field: string &redef

String to use for an unset &optional field.

Detailed Interface

Redefinable Options

InputSQLite::empty_field
Type

string

Attributes

&redef

Default

"(empty)"

String to use for empty fields.

InputSQLite::set_separator
Type

string

Attributes

&redef

Default

","

Separator between set elements. Please note that the separator has to be exactly one character long.

InputSQLite::unset_field
Type

string

Attributes

&redef

Default

"-"

String to use for an unset &optional field.