cisagov / icsnpp-bacnet

Zeek BACnet Parser - CISA ICSNPP
BSD 3-Clause "New" or "Revised" License
15 stars 11 forks source link

Added log policies, for log filtering. #34

Closed keithjjones closed 6 months ago

keithjjones commented 8 months ago

🗣 Description

This will allow for fine grain log filtering.

https://docs.zeek.org/en/master/frameworks/logging.html#filtering-log-records

💭 Motivation and context

We have some unique filtering needs, and this slight tweak will allow anyone to filter if they want.

🧪 Testing

I didn't add testing as it's a standard Zeek feature for logs.

✅ Pre-approval checklist

✅ Pre-merge checklist

✅ Post-merge checklist

kkvarfordt commented 6 months ago

@keithjjones - Sorry for the slow timeline for getting this merged. Thanks for the contribution and the insight on Zeek log filtering.