Closed mattgodbolt closed 9 years ago
In issue #12, it became clear that being able to transform the index before storing it would be very useful. For example, to make case consistent.
5aab30b3f7fd46106bad6a09753c6800ced147cc may go some way to start this process. Now there's a -p/--pipe command so:
$ zindex ~/audit.log.gz -p 'jq --raw-output --unbuffered .eventId'
works, for example.
In issue #12, it became clear that being able to transform the index before storing it would be very useful. For example, to make case consistent.