brimdata / brimcap

Convert pcap files into richly-typed ZNG summary logs (Zeek, Suricata, and more)
BSD 3-Clause "New" or "Revised" License
74 stars 8 forks source link

Revise README section on "Brimcap Queries" #324

Closed philrz closed 10 months ago

philrz commented 10 months ago

In a recent community Slack thread a user expressed confusion at not being able to follow the section of the Brimcap README for importing the saved queries. Indeed, when I tested this out for myself I realized that the recent Preview & Load enhancement has made it such that dragging a queries JSON into the app no longer populates the saved queries list. This experience was a good reminder that I should do a general video walk-through on Saved Queries as a feature. In the meantime, here I'm just proposing a short-term update to the Brimcap README to point users at the way for importing saved queries that still works ok.