Implemented the eventstats command.

salspaugh / splparser

Simple parser for Splunk Processing Language (SPL) written in Python.

Other

35 stars 14 forks source link

Implemented the eventstats command. #106

Closed salspaugh closed 10 years ago

salspaugh commented 10 years ago

All tests pass. It is essentially the same as the stats command less one option. I couldn't figure out where BOOLEAN_OPTIONS was so I added to the stats and eventstats rule modules. I guess that rule isn't usually hit as I haven't noticed it causing an error yet.

keroro824 commented 10 years ago

What is BOOLEAN_OPTIONS?

salspaugh commented 10 years ago

It is a list of the options that take a boolean value that can be checked so that the parameter can be set to a boolean type. I couldn't find where it was defined so I added it.