extract command

[johnidm]

What to extract:

• display-name: user.screeen_name. Return screeen_name
• text-without-retweeted: text, id_str exclude retweeted. It is possible to identify retweeted by pattern on text message. Pattern RT @<screen_name>:. Return text and id_str.

Example of command line:

suricate extract --rule=display-name suricate extract --rule=text-without-retweeted