This patch introduces the brand new pub-sub style instrument API. Currently, it's provided as a WebSocket server.
The new API consists of two components: new action .INSTRUMENT in rule and a instrument server for subscription on specific ids. In the .INSTRUMENT, users can send a specific message to an ID when the rule is matched. Subscribers can subscribe to this ID and read the message from the instrument server. This enables more programmable instrumenting and traffic analysis.
This patch introduces the brand new pub-sub style instrument API. Currently, it's provided as a WebSocket server.
The new API consists of two components: new action
.INSTRUMENT
in rule and a instrument server for subscription on specific ids. In the.INSTRUMENT
, users can send a specific message to an ID when the rule is matched. Subscribers can subscribe to this ID and read the message from the instrument server. This enables more programmable instrumenting and traffic analysis.