Support Suricata EVE DNS v3

jasonish / evebox

Web Based Event Viewer (GUI) for Suricata EVE Events in Elastic Search

https://evebox.org/

MIT License

431 stars 67 forks source link

Open jasonish opened 4 months ago

jasonish commented 4 months ago

Suricata 8 will use v3 of the DNS log formatting...

The pretty printing of events needs to be fixed up
Any queries/reports on request names will need to be fixed-up, somehow supporting the old format as well.