search

gdestuynder / audisp-json

42 stars 17 forks source link

Dont send (null) values #1

Closed gdestuynder closed 9 years ago

gdestuynder commented 10 years ago

This saves space/processing time on SIEMs

gdestuynder commented 9 years ago

@jeffbryner just sending an empty json value would be fine? eg: value = "";

or should the key also be omitted?

jeffbryner commented 9 years ago

I'd go with omitting the key since it's easier to search for missing fields than for fields with len()==0 values

gdestuynder commented 9 years ago

Fixed by https://github.com/gdestuynder/audisp-json/commit/e807c9499e955b96bad7552dc2e10e88d82e006b and https://github.com/gdestuynder/audisp-json/commit/9d8ee1bc94cad4d962104158c2fe9d1f775fcf8f